}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xa000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x9000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x48}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:38:30 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 12:38:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xb000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xa000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x6}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x4c}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 679.131632][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d129c00: rx timeout, send abort [ 679.140001][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d129c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xb000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xc000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x60}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xc000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xe000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:38:31 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 12:38:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x68}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xe000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x12000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 680.459297][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a3c2800: rx timeout, send abort [ 680.467897][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a3c2800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 680.529621][T25942] __nla_validate_parse: 108 callbacks suppressed [ 680.529642][T25943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 680.529641][T25942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 680.537467][T25944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 680.569347][T25940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 680.644448][T25942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 680.697801][T25944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 680.708404][T25940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 680.718278][T25943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:38:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x6c}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 680.841620][T25942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 680.874600][T25944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:38:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x14000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:38:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x9}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:38:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:38:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x12000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x16000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:32 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 12:38:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, 0x0, 0x0, 0x40010002, 0x0) 12:38:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x14000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x74}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 681.774982][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880738cfc00: rx timeout, send abort [ 681.783488][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880738cfc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, 0x0, 0x0, 0x40010002, 0x0) 12:38:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, 0x0, 0x0, 0x40010002, 0x0) 12:38:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x0, 0x0) 12:38:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0xb}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x0, 0x0) 12:38:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x18000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x0, 0x0) 12:38:34 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x2}, 0x0) 12:38:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x7a}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x16000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x16000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0xc}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x19000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 683.102652][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b85ac00: rx timeout, send abort [ 683.111077][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b85ac00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 683.125543][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b858c00: rx timeout, send abort [ 683.134891][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b858c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x68}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x94}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x18000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x1f000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x19}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:35 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x3}, 0x0) 12:38:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x9b}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x19000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x12}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x20000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x4000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 684.459203][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c933400: rx timeout, send abort [ 684.467683][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c933400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 684.482215][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c933000: rx timeout, send abort [ 684.492500][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c933000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x48000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x14}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x1f000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6c}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xc}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x10}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 685.595495][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.601850][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 12:38:36 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x4}, 0x0) 12:38:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x12}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x4c000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x16}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x1f090000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) [ 685.807494][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075c8c400: rx timeout, send abort [ 685.816161][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888075c8c400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 685.830629][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075c8e800: rx timeout, send abort [ 685.839469][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888075c8e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa00}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 685.890724][T26138] __nla_validate_parse: 92 callbacks suppressed [ 685.890747][T26138] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 685.907253][T26142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 685.924247][T26147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:38:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x11}}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) [ 685.962696][T26149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 686.019123][T26142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 686.077264][T26138] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:38:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x11}}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) [ 686.118519][T26147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 686.144467][T26149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 686.278417][T26142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:38:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x11}}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:38:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x18}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 686.332678][T26147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:38:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x48000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:38 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x7}, 0x0) 12:38:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x4f000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x14}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf00}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x19}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x4c000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 687.166238][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807992a400: rx timeout, send abort [ 687.174791][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807992a400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 687.189268][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880739c8800: rx timeout, send abort [ 687.198231][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880739c8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1100}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x3, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x8, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x48}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0xf, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x18}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:39 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x8}, 0x0) 12:38:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x2f, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x60000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x60000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x4c}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 688.513810][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a7aa800: rx timeout, send abort [ 688.522389][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a7aa800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 688.536856][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801ec65400: rx timeout, send abort [ 688.545531][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801ec65400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x94, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x68000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x60}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x68000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:41 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x11}, 0x0) 12:38:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x2, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x6c000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x68}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x6c000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x1f00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 689.868052][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072b60400: rx timeout, send abort [ 689.876522][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888072b60400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 689.891016][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072b60c00: rx timeout, send abort [ 689.899453][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888072b60c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x3, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x4, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x5, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x6, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x7, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x74000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:42 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0xee}, 0x0) 12:38:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x8, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x60}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x6c}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x74000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x7a000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 691.233719][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077b5a400: rx timeout, send abort [ 691.242057][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888077b5a400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 691.256674][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077b5b000: rx timeout, send abort [ 691.265650][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888077b5b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 691.317858][T26318] __nla_validate_parse: 69 callbacks suppressed [ 691.317880][T26318] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 691.336419][T26317] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 691.342484][T26321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 691.358967][T26322] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:38:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x9, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xa, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xb, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 691.465358][T26322] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 691.506695][T26317] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 691.518272][T26321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 691.573125][T26318] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:38:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xc, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 691.616331][T26322] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:38:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4c}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xe, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 691.746926][T26317] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:38:43 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x300}, 0x0) 12:38:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x12, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x94000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x74}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x76180000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 692.625944][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b044000: rx timeout, send abort [ 692.634471][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801b044000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 692.648993][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b046000: rx timeout, send abort [ 692.657406][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801b046000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x14, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x16, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x18, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x19, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xfeffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x48, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x4c, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:45 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x700}, 0x0) 12:38:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x9effffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x7a000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x7a}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x60}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 693.987676][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807daa4c00: rx timeout, send abort [ 693.996121][ C1] vcan0: j1939_tp_rxtimer: 0xffff888077d0b000: rx timeout, send abort [ 694.004573][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807daa4c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 694.008881][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888077d0b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x60, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x68, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x6c, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x74, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x7a, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xf0ffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x94, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:46 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x1100}, 0x0) 12:38:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x9b, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x94}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x94000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x11}}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:38:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xf5ffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 695.344189][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079d28c00: rx timeout, send abort [ 695.352849][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079d28c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 695.367248][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079d28000: rx timeout, send abort [ 695.376078][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079d28000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x0, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xffffff7f}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xc, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x10, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x12, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x2, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:47 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0xee00}, 0x0) 12:38:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xfeffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x9b180000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x9}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 696.697055][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806af0e400: rx timeout, send abort [ 696.705690][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806af0e400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 696.720127][ C1] vcan0: j1939_tp_rxtimer: 0xffff888077b1dc00: rx timeout, send abort [ 696.728634][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888077b1dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 696.786662][T26475] __nla_validate_parse: 47 callbacks suppressed [ 696.786685][T26475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 696.787784][T26478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 696.819239][T26477] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:38:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xc}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 696.857907][T26483] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 696.943163][T26475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:38:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x12}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 696.983532][T26483] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 697.011016][T26478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:38:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x18}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 697.038478][T26477] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:38:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 697.199053][T26483] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 697.230496][T26475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:38:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x44}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:49 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0xefff}, 0x0) 12:38:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x6, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xfffff000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xfffff000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x9effffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 698.098511][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d0de000: rx timeout, send abort [ 698.106914][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d0de000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 698.121494][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d0ddc00: rx timeout, send abort [ 698.130469][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d0ddc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x68}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1ee}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1ef}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa00}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xffffff7f}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xf0ffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:50 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0xffef}, 0x0) 12:38:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x8, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x19000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf00}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xffffff9e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xf5ffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 699.426847][ C1] vcan0: j1939_tp_rxtimer: 0xffff888073817000: rx timeout, send abort [ 699.437174][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888073817000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 699.451677][ C1] vcan0: j1939_tp_rxtimer: 0xffff888073814800: rx timeout, send abort [ 699.460278][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888073814800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x9, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1100}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x47a9}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x3, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x8, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xfeffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:51 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 12:38:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0xa, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xa, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xfffffff0}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xffffe000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 700.773254][ C1] vcan0: j1939_tp_rxtimer: 0xffff888018f01c00: rx timeout, send abort [ 700.781710][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888018f01c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 700.796151][ C1] vcan0: j1939_tp_rxtimer: 0xffff888018f02400: rx timeout, send abort [ 700.807497][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888018f02400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xb, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0xf, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x25, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x2f, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x44, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xfffffff5}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:53 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x3ffff}, 0x0) 12:38:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x60, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xfffff000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x9, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x10, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xfffffffe}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 702.128618][ C0] vcan0: j1939_tp_rxtimer: 0xffff888073a70000: rx timeout, send abort [ 702.137009][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888073a70000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 702.151448][ C0] vcan0: j1939_tp_rxtimer: 0xffff888073a72800: rx timeout, send abort [ 702.160052][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888073a72800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 702.205253][T26636] __nla_validate_parse: 56 callbacks suppressed [ 702.205274][T26636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 702.212481][T26638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 702.239922][T26637] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 12:38:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x11, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x68, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 702.250972][T26642] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:38:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x94, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 702.287908][T26645] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 702.315661][T26647] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 702.365077][T26636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 702.388737][T26642] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:38:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 702.411680][T26638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 702.447835][T26654] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:38:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xffffff7f}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xfffffff5}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:54 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 12:38:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xffffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3000, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x2, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xe000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xffffff9e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 703.487593][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807390cc00: rx timeout, send abort [ 703.496049][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807390cc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 703.510501][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b148c00: rx timeout, send abort [ 703.519166][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801b148c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x7, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x3, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x4, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x5, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x6, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:55 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0xee0000}, 0x0) 12:38:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x7, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xfffffff0}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 704.845518][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c818400: rx timeout, send abort [ 704.853927][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c818400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 704.868347][ C1] vcan0: j1939_tp_rxtimer: 0xffff888073db8000: rx timeout, send abort [ 704.876947][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888073db8000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x8, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x9, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xa, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xb, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xc, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x2, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:57 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 12:38:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xe, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xfffffff5}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x500}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x3, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 706.203290][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880210da400: rx timeout, send abort [ 706.211691][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880210da400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 706.226076][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880210d8400: rx timeout, send abort [ 706.234684][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880210d8400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x12, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x14, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x16, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x18, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x19, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x48, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:58 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 12:38:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x4c, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xfffffffe}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:38:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 707.565786][ C1] vcan0: j1939_tp_rxtimer: 0xffff888018a41800: rx timeout, send abort [ 707.574423][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888018a41800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 707.588804][ C1] vcan0: j1939_tp_rxtimer: 0xffff888018a40000: rx timeout, send abort [ 707.597184][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888018a40000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:38:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0xe}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x60, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 707.653309][T26791] __nla_validate_parse: 55 callbacks suppressed [ 707.653330][T26791] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 707.669824][T26797] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 707.680132][T26800] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:38:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x68, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 707.726544][T26803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 707.812155][T26797] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 707.821971][T26800] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:38:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x6c, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 707.876023][T26803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 707.885935][T26791] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:38:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x74, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:38:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x7a, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 708.017145][T26797] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 708.102599][T26800] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:39:00 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 12:39:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0xffffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x94, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0xffffff9e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x5, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 708.945210][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d9d6000: rx timeout, send abort [ 708.953820][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d9d6000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 708.968262][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d9d5400: rx timeout, send abort [ 708.976868][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d9d5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x0, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x2, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x7, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xc, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x12, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x18, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:01 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 12:39:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x25, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 710.303095][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ac6cc00: rx timeout, send abort [ 710.311393][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806ac6cc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 710.325949][ C1] vcan0: j1939_tp_rxtimer: 0xffff888076d07800: rx timeout, send abort [ 710.334720][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888076d07800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x44, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x68, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x2, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:02 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 12:39:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x8}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x6, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 711.637279][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022ad2000: rx timeout, send abort [ 711.645671][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888022ad2000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 711.660079][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022ad0c00: rx timeout, send abort [ 711.668493][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888022ad0c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x8, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x4c}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x9}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x8, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:04 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 12:39:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x9, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x9, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x19}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 713.009278][ C0] vcan0: j1939_tp_rxtimer: 0xffff888074919800: rx timeout, send abort [ 713.017751][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888074919800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 713.032193][ C0] vcan0: j1939_tp_rxtimer: 0xffff888074918400: rx timeout, send abort [ 713.041154][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888074918400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 713.076252][T26957] __nla_validate_parse: 58 callbacks suppressed [ 713.076274][T26957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 713.097616][T26961] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 713.100666][T26964] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 713.108735][T26962] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 713.126890][T26963] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 713.280785][T26957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 713.295049][T26963] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 713.305216][T26961] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 713.305695][T26962] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 713.314998][T26964] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:39:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xa, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xb, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xa, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xa, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:05 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0x11000000}, 0x0) 12:39:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe001900) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000)=0x7ff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@local, 0xca, 0x1, 0x3, 0xb, 0x8001, 0x5}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:39:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x10, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xb, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 714.401983][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cd37000: rx timeout, send abort [ 714.410431][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cd37000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 714.424846][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cd36800: rx timeout, send abort [ 714.433322][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cd36800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x11, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x6c000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xc, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x44, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:06 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0xfeffffff}, 0x0) 12:39:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x68, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x12}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xe, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x12000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 715.760516][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806d606000: rx timeout, send abort [ 715.769004][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806d606000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 715.783372][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a92cc00: rx timeout, send abort [ 715.791680][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a92cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3000, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x5, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x8}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x12, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x9}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x7, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x14}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:08 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0xffef0000}, 0x0) 12:39:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x5, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x14, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x9, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x16}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 717.107618][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072bac400: rx timeout, send abort [ 717.116313][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888072bac400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 717.130761][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072bae400: rx timeout, send abort [ 717.140057][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888072bae400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x16, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x18}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x44, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x9, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x18, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 718.087497][T27153] __nla_validate_parse: 101 callbacks suppressed [ 718.087520][T27153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 718.121943][T27165] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 718.210282][T27165] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:39:09 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0xffff0300}, 0x0) 12:39:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x19}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x68, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x19000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x19, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 718.457511][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801ab60800: rx timeout, send abort [ 718.466005][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ecba000: rx timeout, send abort [ 718.474284][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801ab60800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 718.474610][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806ecba000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 718.525793][T27172] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 718.544071][T27176] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 718.551711][T27178] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 718.554795][T27179] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 718.570207][T27177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 718.631331][T27176] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 718.719715][T27178] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:39:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x48}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x48, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x12}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x12}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 12:39:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4c}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4c, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0xb000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x2, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x14}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 719.840478][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023485400: rx timeout, send abort [ 719.848997][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888023485400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 719.863454][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880123cb800: rx timeout, send abort [ 719.872162][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880123cb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x60}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x68}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x60, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x16}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x3, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x68}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:12 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0) 12:39:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x68, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x2e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x18}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6c}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 721.185407][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075642400: rx timeout, send abort [ 721.193939][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888075642400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 721.208319][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022ad3000: rx timeout, send abort [ 721.216849][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888022ad3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x5, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x74}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6c, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x19}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0xb000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:13 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x2) 12:39:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7a}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x74, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x48}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 722.532107][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801c452c00: rx timeout, send abort [ 722.540733][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801c452c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 722.555168][ C1] vcan0: j1939_tp_rxtimer: 0xffff888019f4ec00: rx timeout, send abort [ 722.563607][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888019f4ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4c}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7a, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffff000, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x8, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x94}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 723.102551][T27375] __nla_validate_parse: 110 callbacks suppressed [ 723.102573][T27375] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 723.157295][T27377] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 723.181072][T27381] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 723.239422][T27368] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 723.270214][T27375] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 723.275985][T27373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:39:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4f}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 723.293845][T27381] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 723.314522][T27377] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 723.352630][T27386] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 723.446505][T27375] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:15 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x3) 12:39:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x6800}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x9, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x94, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x60}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 723.878072][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072a50400: rx timeout, send abort [ 723.886856][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888072a50400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 723.901310][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bff3400: rx timeout, send abort [ 723.910297][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bff3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x9b, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x68}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xa, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xf0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:16 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x4) 12:39:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6c}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4c000000, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xb, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x300, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x4}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 725.215738][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880790c6c00: rx timeout, send abort [ 725.224328][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880790c6c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 725.238787][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880790c7800: rx timeout, send abort [ 725.247319][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880790c7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x500, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xc, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x9b00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x74}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x600, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:17 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x7) 12:39:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xe, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000002280)={'ipvs\x00'}, &(0x7f00000022c0)=0x1e) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0xd1558000) recvmsg(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001fc0)=""/145, 0x91}, {&(0x7f0000002080)=""/194, 0xc2}], 0x2, &(0x7f00000021c0)=""/118, 0x76}, 0x10000) clock_gettime(0x0, &(0x7f0000001f40)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e40)=[{{&(0x7f0000000100)=@abs, 0x6e, 0xfffffffffffffffd, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/72, 0x48}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/104, 0x68}, {&(0x7f00000014c0)=""/216, 0xd8}, {&(0x7f00000015c0)=""/181, 0xb5}, {&(0x7f0000001680)=""/38, 0x26}], 0x8}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001740)=""/3, 0x3}, {&(0x7f0000001900)=""/100, 0x64}], 0x2, &(0x7f00000019c0)=ANY=[@ANYBLOB="180000", @ANYRES32, @ANYRES32], 0x18}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001b40)=""/204, 0xcc}, {&(0x7f0000001c40)=""/127, 0x7f}, {&(0x7f0000001cc0)=""/100, 0x64}, {&(0x7f0000001d40)=""/89, 0x59}], 0x4, &(0x7f0000001dc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}], 0x4, 0x40000041, &(0x7f0000001f80)={r1, r2+10000000}) 12:39:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7a}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x6}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x700, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 726.560796][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072362000: rx timeout, send abort [ 726.569274][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888072362000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 726.584028][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072360800: rx timeout, send abort [ 726.592560][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888072360800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x7a00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x12, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x94}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x900, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffffff, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:19 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x8) 12:39:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x14, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x99b, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x4800}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 727.906309][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807dbdac00: rx timeout, send abort [ 727.914716][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807dbdac00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 727.929142][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807dbda400: rx timeout, send abort [ 727.939734][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807dbda400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 728.110957][T27577] __nla_validate_parse: 109 callbacks suppressed [ 728.111091][T27577] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 728.161123][T27581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 728.171428][T27579] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 728.177469][T27578] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 728.194805][T27572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 728.293990][T27577] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:39:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xa00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x9}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 728.448383][T27579] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 728.458374][T27572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 728.468637][T27581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 728.475653][T27600] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:39:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x2000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x16, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:20 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x11) 12:39:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xb00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x18, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0xb}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 729.255085][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880232eec00: rx timeout, send abort [ 729.263594][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a554400: rx timeout, send abort [ 729.271840][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880232eec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 729.271899][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a554400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0xc}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xc00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xb00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x4}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x19, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:21 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xee) 12:39:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xe00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:39:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x48, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x12}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 730.612952][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078414000: rx timeout, send abort [ 730.621816][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888078414000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 730.636242][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078416800: rx timeout, send abort [ 730.644803][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888078416800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x14}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x6}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4c, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1200, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x16}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:23 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x300) 12:39:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x60, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xe00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1400, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x18}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 731.967145][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807aaf9400: rx timeout, send abort [ 731.975585][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807aaf9400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 731.990033][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e498800: rx timeout, send abort [ 731.998474][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e498800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x9}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1600, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x19}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x68, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x18}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:24 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x700) 12:39:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1800, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x48}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1600, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6c, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0xb}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 733.317719][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801de7f400: rx timeout, send abort [ 733.326379][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072d3f000: rx timeout, send abort [ 733.334671][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801de7f400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 733.334762][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888072d3f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 733.395751][T27807] __nla_validate_parse: 114 callbacks suppressed [ 733.395771][T27807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 733.412295][T27809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 733.412452][T27803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 733.436666][T27808] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 733.440028][T27810] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 733.485815][T27809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 733.592519][T27808] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 733.603193][T27807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 733.613065][T27803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 733.635965][T27810] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x4c}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1900, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0xc}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x74, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x9}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1f00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:25 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x1100) 12:39:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x60}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7a, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffff7f, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4800, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 734.712026][ C0] vcan0: j1939_tp_rxtimer: 0xffff888019d01000: rx timeout, send abort [ 734.720702][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888019d01000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 734.735241][ C0] vcan0: j1939_tp_rxtimer: 0xffff888019d00000: rx timeout, send abort [ 734.744455][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888019d00000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4c00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x1600}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x68}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x12}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x94, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:27 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xee00) 12:39:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x6c}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x1600}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x14}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xf0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6800, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 736.060236][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a920000: rx timeout, send abort [ 736.068538][ C1] vcan0: j1939_tp_rxtimer: 0xffff888019ce4000: rx timeout, send abort [ 736.076829][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a920000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 736.078112][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888019ce4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x74}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x300, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6c00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xf0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x16}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x7a}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:28 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xefff) 12:39:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x500, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7400, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x9000000, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x18}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x94}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 737.387300][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a528000: rx timeout, send abort [ 737.395658][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a528000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 737.410244][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b36ec00: rx timeout, send abort [ 737.418926][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b36ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7a00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x8000000, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x600, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x19}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xc}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x10}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x12}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:29 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xffef) 12:39:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x9400, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x64e, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x48}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 738.729094][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801c9fec00: rx timeout, send abort [ 738.737525][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801c9fec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 738.752003][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021f2b800: rx timeout, send abort [ 738.760366][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888021f2b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 738.812401][T28031] __nla_validate_parse: 116 callbacks suppressed [ 738.812423][T28031] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 738.814703][T28032] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 738.821326][T28033] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:39:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x14}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 738.853752][T28030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa00}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 738.926824][T28041] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 738.936910][T28032] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 739.018001][T28031] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 739.026318][T28030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 739.033221][T28033] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 739.089621][T28041] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:39:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x9b00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x4c}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x700, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf00}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1100}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:31 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x34000) 12:39:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x48}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x3, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x9b09, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x4f}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x900, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 740.102362][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880159a7c00: rx timeout, send abort [ 740.110818][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880159a7c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 740.125271][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880159a6400: rx timeout, send abort [ 740.133805][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880159a6400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x8, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0xf, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x2f, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x94, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x900}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:32 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x3ffff) 12:39:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xf000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xa00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x60}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x2, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x700}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 741.457886][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801c802000: rx timeout, send abort [ 741.466693][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801c802000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 741.481477][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801c800000: rx timeout, send abort [ 741.489947][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801c800000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x3, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x4, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x5, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x6, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x68}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xb00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf0ffff, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:33 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x400300) 12:39:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x7, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x20000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x6c}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xc00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 742.803617][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c90d000: rx timeout, send abort [ 742.811929][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c90d000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 742.826341][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c90cc00: rx timeout, send abort [ 742.834878][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c90cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x8, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x9, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xa, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xb, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xc, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x300}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xe00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:35 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xee0000) 12:39:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xf0ffff, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xe, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x74}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x4c}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1200, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 744.148226][ C0] vcan0: j1939_tp_rxtimer: 0xffff888015e07800: rx timeout, send abort [ 744.156580][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888015e07800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 744.171037][ C0] vcan0: j1939_tp_rxtimer: 0xffff888076e7d000: rx timeout, send abort [ 744.179648][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888076e7d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 744.225657][T28206] __nla_validate_parse: 69 callbacks suppressed [ 744.225678][T28206] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 744.250221][T28212] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 744.251444][T28210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x12, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 744.260805][T28211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:39:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x14, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x16, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x18, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 744.382150][T28212] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 744.447022][T28206] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 744.474824][T28210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 744.486172][T28211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:39:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x19, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x48, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 744.588964][T28212] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 744.698198][T28206] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:39:36 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x1000000) 12:39:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/86, &(0x7f00000000c0)=0x56) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r3, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000000)) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10001}, {0xa, 0x4e21, 0x800, @mcast1, 0x3}, 0x5, [0x3, 0xff, 0x6, 0xf2a, 0x8, 0xffffffff, 0x6, 0xfffffe00]}, 0x5c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0x40305839, &(0x7f0000000240)={0x0, 0x20be0200, 0x2be20000}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x10c, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xf0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x23, 0x100, 0x401, 0x4, 0x2, 0x9, 0xdd, 0xa753]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x0, 0x5, 0x238d, 0x7, 0x8, 0x44]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x16, 0x18, 0x30, 0x18, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe8e9, 0x6, 0xff, 0x0, 0xc45, 0x9, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x1, 0x81, 0x0, 0x8001, 0xce2, 0x3f]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x4}, {0x3, 0x6}, {0x1, 0x3}, {0x2}, {0x0, 0x8}, {0x4, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x5}, {0x6, 0x9}, {0x2, 0x3}, {0x6, 0x3}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x6}, {0x7, 0x2}, {0x3, 0x6}, {0x7, 0x3}, {0x6, 0x9}, {0x5, 0xa}, {0x5}, {0x2, 0x3}, {0x6, 0x8}, {0x4, 0x6}, {0x7, 0x1}, {0x0, 0xa}, {0x4}, {0x5, 0x4}, {0x6, 0x3}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0x1}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x1}, {0x1, 0x6}, {0x6, 0x7}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x2}, {0x6, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x4, 0x4}, {0x6, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x4, 0x4}, {0x0, 0x5}, {0x4, 0x9}, {0x4}, {0x4}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0xa}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004004) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:39:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x4c, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1400, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x7a}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 745.540000][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072253800: rx timeout, send abort [ 745.548342][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888072253800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 745.562740][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072250400: rx timeout, send abort [ 745.571160][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888072250400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x60, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x68, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x6c, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x74, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/86, &(0x7f00000000c0)=0x56) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r3, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000000)) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10001}, {0xa, 0x4e21, 0x800, @mcast1, 0x3}, 0x5, [0x3, 0xff, 0x6, 0xf2a, 0x8, 0xffffffff, 0x6, 0xfffffe00]}, 0x5c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0x40305839, &(0x7f0000000240)={0x0, 0x20be0200, 0x2be20000}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x10c, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xf0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x23, 0x100, 0x401, 0x4, 0x2, 0x9, 0xdd, 0xa753]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x0, 0x5, 0x238d, 0x7, 0x8, 0x44]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x16, 0x18, 0x30, 0x18, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe8e9, 0x6, 0xff, 0x0, 0xc45, 0x9, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x1, 0x81, 0x0, 0x8001, 0xce2, 0x3f]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x4}, {0x3, 0x6}, {0x1, 0x3}, {0x2}, {0x0, 0x8}, {0x4, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x5}, {0x6, 0x9}, {0x2, 0x3}, {0x6, 0x3}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x6}, {0x7, 0x2}, {0x3, 0x6}, {0x7, 0x3}, {0x6, 0x9}, {0x5, 0xa}, {0x5}, {0x2, 0x3}, {0x6, 0x8}, {0x4, 0x6}, {0x7, 0x1}, {0x0, 0xa}, {0x4}, {0x5, 0x4}, {0x6, 0x3}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0x1}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x1}, {0x1, 0x6}, {0x6, 0x7}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x2}, {0x6, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x4, 0x4}, {0x6, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x4, 0x4}, {0x0, 0x5}, {0x4, 0x9}, {0x4}, {0x4}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0xa}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004004) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:39:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x7a, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:38 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x2000000) 12:39:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1600, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x2000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x94, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x94}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x60}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 746.904369][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c918c00: rx timeout, send abort [ 746.912710][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806c918c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 746.927161][ C1] vcan0: j1939_tp_rxtimer: 0xffff888019cee800: rx timeout, send abort [ 746.935584][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888019cee800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x0, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xc, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 747.026289][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.032649][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 12:39:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x10, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x12, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x14, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x2, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x94}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x3000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1800, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:39 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x3000000) 12:39:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 748.258582][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801cba7000: rx timeout, send abort [ 748.267017][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801cba7000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 748.281446][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801cba5c00: rx timeout, send abort [ 748.291594][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801cba5c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xc}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x12}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x18}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1900, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x6, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:40 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x4000000) 12:39:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x19}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1b4d, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x5000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 749.615721][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805562ec00: rx timeout, send abort [ 749.624144][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805562ec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 749.638731][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805562fc00: rx timeout, send abort [ 749.647423][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805562fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x68}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 749.699105][T28361] __nla_validate_parse: 41 callbacks suppressed [ 749.699125][T28361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 749.707288][T28360] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 749.724438][T28363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:39:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1c4}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 749.787631][T28371] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:39:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1c5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 749.838095][T28363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 749.896913][T28361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 749.907036][T28360] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 749.925107][T28371] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:39:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa00}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 750.007369][T28363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 750.022125][T28383] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1b80, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1b4d, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:42 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x7000000) 12:39:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x8, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf00}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1f00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x18}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 751.004756][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a8dbc00: rx timeout, send abort [ 751.013240][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a8dbc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 751.027666][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a8d8400: rx timeout, send abort [ 751.036166][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a8d8400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1100}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x9, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x439d}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x3, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x8, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0xa, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:43 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x8000000) 12:39:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0xf, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x2000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xa, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 752.383882][ C1] vcan0: j1939_tp_rxtimer: 0xffff888015eb1400: rx timeout, send abort [ 752.392182][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888015eb1400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 752.392514][ C0] vcan0: j1939_tp_rxtimer: 0xffff888073ac2c00: rx timeout, send abort [ 752.415165][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888073ac2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xb, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x25, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x2f, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x60, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x68, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x94, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:44 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x11000000) 12:39:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x8000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4800, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x10, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 753.737199][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a555000: rx timeout, send abort [ 753.745742][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a555000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 753.760286][ C1] vcan0: j1939_tp_rxtimer: 0xffff888077f8f400: rx timeout, send abort [ 753.769090][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888077f8f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x11, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:45 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x8000000) 12:39:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x2, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x9000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3000, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4c00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:46 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xfeffffff) 12:39:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x3, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x7, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xa000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4d1b, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 755.084769][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072f12c00: rx timeout, send abort [ 755.096037][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888072f12c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 755.110461][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d995c00: rx timeout, send abort [ 755.119254][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d995c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x4, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x5, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 755.164943][T28525] __nla_validate_parse: 60 callbacks suppressed [ 755.164963][T28525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 755.178703][T28520] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 755.181532][T28524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 755.296855][T28520] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 755.328925][T28525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 755.356536][T28524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 755.411952][T28520] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 755.421481][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021909000: rx timeout, send abort [ 755.421604][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880797cb800: rx timeout, send abort [ 755.438418][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888021909000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x6, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 755.452998][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880797cb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x7, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x8, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 755.516740][T28525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 755.540609][T28545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xb000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 755.673386][T28552] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:39:47 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xffef0000) 12:39:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4e06, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x9, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x10, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xc000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 756.465660][ C0] vcan0: j1939_tp_rxtimer: 0xffff888019cddc00: rx timeout, send abort [ 756.474080][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888019cddc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xa, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xb, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xc, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0xe, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x12, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x7a, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:48 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xffff0300) 12:39:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x14, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x14, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xe000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x300}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 757.796494][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072252800: rx timeout, send abort [ 757.805001][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888072252800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x16, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x18, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x19, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x48, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x4c, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x4f, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:50 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xffffff7f) 12:39:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6800, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x60, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x12000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x300}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 759.261993][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079001c00: rx timeout, send abort [ 759.271029][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079001c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x68, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x6c, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x74, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x7a, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x94, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x2, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:51 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xfffffffe) 12:39:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x0, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f00000001c0)=""/266, 0xff8f}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, r1, 0x6db8000) 12:39:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6c00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x14000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x3, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 760.590306][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807db1c800: rx timeout, send abort [ 760.598748][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807db1c800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x2, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f00000000c0)=0x4, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}, {0x0}, {0x0}], 0x4, 0x0, 0xffffffffffffffce}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000400)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) r3 = epoll_create1(0x0) recvfrom(r1, &(0x7f0000000240)=""/172, 0xac, 0x40000000, &(0x7f0000000300)=@phonet={0x23, 0x1f, 0x7f, 0x3}, 0x80) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x1, 0x1}, 0x8) ioctl$FITRIM(0xffffffffffffffff, 0x40305839, &(0x7f0000000240)={0x0, 0x20be0200, 0x2be20000}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x1, 0x458}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x30000004}) ioctl$int_in(r2, 0x5421, &(0x7f0000000440)=0x3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) bind(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @broadcast}, 0x3, 0x0, 0x4, 0x2}}, 0x80) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) [ 760.641041][T28680] __nla_validate_parse: 47 callbacks suppressed [ 760.641061][T28680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 760.648010][T28682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 760.668186][T28681] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:39:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x3, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 760.813595][T28681] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:39:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xc, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:52 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0xfeffffff00000000, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 760.890439][T28680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 760.910136][T28682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:39:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x12, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 761.041358][T28704] vcan0: tx drop: invalid da for name 0xfeffffff00000000 [ 761.082444][T28681] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 761.108597][T28680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 761.127982][T28682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:39:53 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x674c7a8492) 12:39:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x18, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x16000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7400, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 761.963073][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b6b3400: rx timeout, send abort [ 761.971530][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b6b3400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x25, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 762.019474][T28713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:39:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x68, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x2, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x5, 0x3, 0x80000000}) openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000240)={0x0, 0x20be0200, 0x2be20000}) sendto$inet6(r1, &(0x7f00000001c0)="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", 0x1000, 0x40000, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:39:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x5, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 762.287134][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a529000: rx timeout, send abort [ 762.295712][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a529000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:54 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x40030000000000) 12:39:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x18000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7a00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 1) 12:39:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x6, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 763.302510][ C1] vcan0: j1939_tp_rxtimer: 0xffff888076399400: rx timeout, send abort [ 763.311074][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888076399400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 763.325500][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807639b800: rx timeout, send abort [ 763.334018][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807639b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 763.396759][T28757] FAULT_INJECTION: forcing a failure. [ 763.396759][T28757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.419186][T28757] CPU: 1 PID: 28757 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 763.429739][T28757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.439850][T28757] Call Trace: [ 763.443144][T28757] [ 763.446089][T28757] dump_stack_lvl+0xcd/0x134 [ 763.450709][T28757] should_fail.cold+0x5/0xa [ 763.455247][T28757] _copy_from_user+0x2c/0x180 [ 763.459953][T28757] __copy_msghdr_from_user+0x91/0x4b0 [ 763.465467][T28757] ? __ia32_sys_shutdown+0x70/0x70 [ 763.470604][T28757] ___sys_recvmsg+0xd5/0x200 [ 763.475211][T28757] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 763.480861][T28757] ? lock_downgrade+0x6e0/0x6e0 [ 763.485718][T28757] ? lock_chain_count+0x20/0x20 [ 763.490620][T28757] ? __fget_files+0x28c/0x470 [ 763.495424][T28757] ? __fget_light+0xea/0x280 [ 763.500022][T28757] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 763.506280][T28757] do_recvmmsg+0x24d/0x6d0 [ 763.510697][T28757] ? ___sys_recvmsg+0x200/0x200 [ 763.515558][T28757] ? find_held_lock+0x2d/0x110 [ 763.520351][T28757] ? __context_tracking_exit+0xb8/0xe0 [ 763.525806][T28757] ? lock_downgrade+0x6e0/0x6e0 [ 763.530662][T28757] ? lock_downgrade+0x6e0/0x6e0 [ 763.535531][T28757] __x64_sys_recvmmsg+0x20b/0x260 [ 763.540557][T28757] ? __do_sys_socketcall+0x590/0x590 [ 763.545854][T28757] ? syscall_enter_from_user_mode+0x21/0x70 [ 763.551785][T28757] do_syscall_64+0x35/0xb0 [ 763.556211][T28757] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 763.562105][T28757] RIP: 0033:0x7f067a2a6049 [ 763.566520][T28757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 763.586128][T28757] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 12:39:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 2) [ 763.594565][T28757] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 763.602534][T28757] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 763.610514][T28757] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 763.618526][T28757] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 [ 763.626620][T28757] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 763.634621][T28757] [ 763.755104][T28770] FAULT_INJECTION: forcing a failure. [ 763.755104][T28770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.768814][T28770] CPU: 1 PID: 28770 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 763.779347][T28770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.789423][T28770] Call Trace: [ 763.792714][T28770] [ 763.795655][T28770] dump_stack_lvl+0xcd/0x134 [ 763.800277][T28770] should_fail.cold+0x5/0xa [ 763.804815][T28770] _copy_from_user+0x2c/0x180 [ 763.809512][T28770] __copy_msghdr_from_user+0x91/0x4b0 [ 763.814981][T28770] ? __ia32_sys_shutdown+0x70/0x70 [ 763.820083][T28770] ? __lock_acquire+0x1666/0x56c0 [ 763.825119][T28770] ___sys_recvmsg+0xd5/0x200 [ 763.829723][T28770] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 763.835356][T28770] ? find_held_lock+0x2d/0x110 [ 763.840124][T28770] ? __might_fault+0xd1/0x170 [ 763.844813][T28770] ? lock_downgrade+0x6e0/0x6e0 [ 763.849671][T28770] do_recvmmsg+0x24d/0x6d0 [ 763.854100][T28770] ? ___sys_recvmsg+0x200/0x200 [ 763.858975][T28770] ? find_held_lock+0x2d/0x110 [ 763.863744][T28770] ? __context_tracking_exit+0xb9/0xe0 [ 763.869226][T28770] ? lock_downgrade+0x6e0/0x6e0 [ 763.874184][T28770] __x64_sys_recvmmsg+0x20b/0x260 [ 763.879267][T28770] ? __do_sys_socketcall+0x590/0x590 [ 763.884563][T28770] ? syscall_enter_from_user_mode+0x21/0x70 [ 763.890468][T28770] do_syscall_64+0x35/0xb0 [ 763.894972][T28770] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 763.900869][T28770] RIP: 0033:0x7f067a2a6049 [ 763.905277][T28770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 763.925021][T28770] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 763.933434][T28770] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 763.941403][T28770] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 763.949367][T28770] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 763.957330][T28770] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 [ 763.965295][T28770] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 763.973299][T28770] 12:39:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 3) 12:39:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 764.068625][T28776] FAULT_INJECTION: forcing a failure. [ 764.068625][T28776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.115843][T28776] CPU: 0 PID: 28776 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 764.126432][T28776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.136515][T28776] Call Trace: [ 764.139806][T28776] [ 764.142757][T28776] dump_stack_lvl+0xcd/0x134 [ 764.147461][T28776] should_fail.cold+0x5/0xa [ 764.152007][T28776] _copy_from_user+0x2c/0x180 [ 764.156717][T28776] __copy_msghdr_from_user+0x91/0x4b0 [ 764.162117][T28776] ? __ia32_sys_shutdown+0x70/0x70 [ 764.167258][T28776] ? __lock_acquire+0x1666/0x56c0 [ 764.172323][T28776] ___sys_recvmsg+0xd5/0x200 [ 764.176940][T28776] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 764.182609][T28776] ? find_held_lock+0x2d/0x110 [ 764.187392][T28776] ? __might_fault+0xd1/0x170 [ 764.192089][T28776] ? lock_downgrade+0x6e0/0x6e0 [ 764.196986][T28776] do_recvmmsg+0x24d/0x6d0 [ 764.201431][T28776] ? ___sys_recvmsg+0x200/0x200 [ 764.206316][T28776] ? find_held_lock+0x2d/0x110 [ 764.211107][T28776] ? __context_tracking_exit+0xb9/0xe0 [ 764.216583][T28776] ? lock_downgrade+0x6e0/0x6e0 [ 764.221454][T28776] __x64_sys_recvmmsg+0x20b/0x260 [ 764.226493][T28776] ? __do_sys_socketcall+0x590/0x590 [ 764.231792][T28776] ? syscall_enter_from_user_mode+0x21/0x70 [ 764.237702][T28776] do_syscall_64+0x35/0xb0 [ 764.242128][T28776] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 764.248049][T28776] RIP: 0033:0x7f067a2a6049 [ 764.252485][T28776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 764.272102][T28776] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 764.280544][T28776] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 764.288522][T28776] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 764.296500][T28776] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 764.304476][T28776] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 12:39:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x801b, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x19000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 764.312453][T28776] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 764.320510][T28776] 12:39:55 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xee000000000000) 12:39:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 4) 12:39:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x8, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x8, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1f000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 764.661268][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d84ec00: rx timeout, send abort [ 764.669822][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d84ec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 764.684322][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f761800: rx timeout, send abort [ 764.693231][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f761800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 764.759962][T28799] FAULT_INJECTION: forcing a failure. [ 764.759962][T28799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.789617][T28799] CPU: 0 PID: 28799 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 764.800174][T28799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.810236][T28799] Call Trace: [ 764.813516][T28799] [ 764.816447][T28799] dump_stack_lvl+0xcd/0x134 [ 764.821049][T28799] should_fail.cold+0x5/0xa [ 764.825570][T28799] _copy_from_user+0x2c/0x180 [ 764.830291][T28799] __copy_msghdr_from_user+0x91/0x4b0 [ 764.835728][T28799] ? __ia32_sys_shutdown+0x70/0x70 [ 764.840902][T28799] ? __lock_acquire+0x1666/0x56c0 [ 764.845960][T28799] ___sys_recvmsg+0xd5/0x200 [ 764.850558][T28799] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 764.856206][T28799] ? find_held_lock+0x2d/0x110 [ 764.861000][T28799] ? __might_fault+0xd1/0x170 [ 764.865706][T28799] ? lock_downgrade+0x6e0/0x6e0 [ 764.870597][T28799] do_recvmmsg+0x24d/0x6d0 [ 764.875030][T28799] ? ___sys_recvmsg+0x200/0x200 [ 764.879912][T28799] ? find_held_lock+0x2d/0x110 [ 764.884687][T28799] ? __context_tracking_exit+0xb9/0xe0 [ 764.890159][T28799] ? lock_downgrade+0x6e0/0x6e0 [ 764.895093][T28799] __x64_sys_recvmmsg+0x20b/0x260 [ 764.900160][T28799] ? __do_sys_socketcall+0x590/0x590 [ 764.905487][T28799] ? syscall_enter_from_user_mode+0x21/0x70 [ 764.911398][T28799] do_syscall_64+0x35/0xb0 [ 764.915823][T28799] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 764.921725][T28799] RIP: 0033:0x7f067a2a6049 [ 764.926143][T28799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 764.945767][T28799] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 12:39:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x9400, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x9, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 764.954199][T28799] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 764.962174][T28799] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 764.970156][T28799] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 764.978140][T28799] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 [ 764.986118][T28799] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 764.994106][T28799] 12:39:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 5) [ 765.125100][T28814] FAULT_INJECTION: forcing a failure. [ 765.125100][T28814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.168544][T28814] CPU: 0 PID: 28814 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 765.179105][T28814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.189182][T28814] Call Trace: [ 765.192605][T28814] [ 765.195548][T28814] dump_stack_lvl+0xcd/0x134 [ 765.200166][T28814] should_fail.cold+0x5/0xa [ 765.204707][T28814] _copy_from_user+0x2c/0x180 [ 765.209420][T28814] __copy_msghdr_from_user+0x91/0x4b0 [ 765.214823][T28814] ? __ia32_sys_shutdown+0x70/0x70 [ 765.220059][T28814] ? __lock_acquire+0x1666/0x56c0 [ 765.225134][T28814] ___sys_recvmsg+0xd5/0x200 [ 765.229753][T28814] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 765.235433][T28814] ? find_held_lock+0x2d/0x110 [ 765.240237][T28814] ? __might_fault+0xd1/0x170 [ 765.244947][T28814] ? lock_downgrade+0x6e0/0x6e0 [ 765.249848][T28814] do_recvmmsg+0x24d/0x6d0 [ 765.254303][T28814] ? ___sys_recvmsg+0x200/0x200 [ 765.259196][T28814] ? find_held_lock+0x2d/0x110 [ 765.264004][T28814] ? __context_tracking_exit+0xb9/0xe0 [ 765.269501][T28814] ? lock_downgrade+0x6e0/0x6e0 [ 765.274389][T28814] __x64_sys_recvmmsg+0x20b/0x260 [ 765.279548][T28814] ? __do_sys_socketcall+0x590/0x590 [ 765.284866][T28814] ? syscall_enter_from_user_mode+0x21/0x70 [ 765.290777][T28814] do_syscall_64+0x35/0xb0 [ 765.295367][T28814] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 765.301298][T28814] RIP: 0033:0x7f067a2a6049 [ 765.305724][T28814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 765.325352][T28814] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 765.333795][T28814] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 765.341791][T28814] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 765.349773][T28814] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 765.357742][T28814] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 12:39:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 6) [ 765.365712][T28814] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 765.373777][T28814] 12:39:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x9, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x48000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 765.481348][T28824] FAULT_INJECTION: forcing a failure. [ 765.481348][T28824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.508307][T28824] CPU: 1 PID: 28824 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 765.518871][T28824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.528949][T28824] Call Trace: [ 765.532242][T28824] [ 765.535226][T28824] dump_stack_lvl+0xcd/0x134 [ 765.539820][T28824] should_fail.cold+0x5/0xa [ 765.544335][T28824] _copy_from_user+0x2c/0x180 [ 765.549025][T28824] __copy_msghdr_from_user+0x91/0x4b0 [ 765.554417][T28824] ? __ia32_sys_shutdown+0x70/0x70 [ 765.559522][T28824] ? __lock_acquire+0x1666/0x56c0 [ 765.564575][T28824] ___sys_recvmsg+0xd5/0x200 [ 765.569180][T28824] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 765.574849][T28824] ? find_held_lock+0x2d/0x110 [ 765.579612][T28824] ? __might_fault+0xd1/0x170 [ 765.584283][T28824] ? lock_downgrade+0x6e0/0x6e0 [ 765.589140][T28824] do_recvmmsg+0x24d/0x6d0 [ 765.593584][T28824] ? ___sys_recvmsg+0x200/0x200 [ 765.598454][T28824] ? find_held_lock+0x2d/0x110 [ 765.603246][T28824] ? __context_tracking_exit+0xb9/0xe0 [ 765.608743][T28824] ? lock_downgrade+0x6e0/0x6e0 [ 765.613638][T28824] __x64_sys_recvmmsg+0x20b/0x260 [ 765.618693][T28824] ? __do_sys_socketcall+0x590/0x590 [ 765.624019][T28824] ? syscall_enter_from_user_mode+0x21/0x70 [ 765.629954][T28824] do_syscall_64+0x35/0xb0 [ 765.634398][T28824] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 765.640315][T28824] RIP: 0033:0x7f067a2a6049 [ 765.645153][T28824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 765.664760][T28824] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 765.673189][T28824] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 12:39:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 7) [ 765.681271][T28824] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 765.689277][T28824] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 765.697243][T28824] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 [ 765.705242][T28824] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 765.713224][T28824] [ 765.800902][T28822] __nla_validate_parse: 46 callbacks suppressed [ 765.800926][T28822] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 765.830310][T28832] FAULT_INJECTION: forcing a failure. [ 765.830310][T28832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.846284][T28832] CPU: 0 PID: 28832 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 765.846514][T28827] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 765.856830][T28832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.856854][T28832] Call Trace: [ 765.856864][T28832] [ 765.856875][T28832] dump_stack_lvl+0xcd/0x134 [ 765.856917][T28832] should_fail.cold+0x5/0xa [ 765.856953][T28832] _copy_from_user+0x2c/0x180 [ 765.856987][T28832] __copy_msghdr_from_user+0x91/0x4b0 [ 765.901548][T28832] ? __ia32_sys_shutdown+0x70/0x70 [ 765.906674][T28832] ? __lock_acquire+0x1666/0x56c0 [ 765.911723][T28832] ___sys_recvmsg+0xd5/0x200 [ 765.916324][T28832] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 765.921986][T28832] ? find_held_lock+0x2d/0x110 [ 765.926782][T28832] ? __might_fault+0xd1/0x170 [ 765.931469][T28832] ? lock_downgrade+0x6e0/0x6e0 [ 765.936345][T28832] do_recvmmsg+0x24d/0x6d0 [ 765.940779][T28832] ? ___sys_recvmsg+0x200/0x200 [ 765.945645][T28832] ? find_held_lock+0x2d/0x110 [ 765.950427][T28832] ? __context_tracking_exit+0xb9/0xe0 [ 765.955901][T28832] ? lock_downgrade+0x6e0/0x6e0 [ 765.960760][T28832] __x64_sys_recvmmsg+0x20b/0x260 [ 765.965811][T28832] ? __do_sys_socketcall+0x590/0x590 [ 765.971105][T28832] ? syscall_enter_from_user_mode+0x21/0x70 [ 765.977010][T28832] do_syscall_64+0x35/0xb0 [ 765.981433][T28832] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 765.987335][T28832] RIP: 0033:0x7f067a2a6049 [ 765.991753][T28832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 766.011365][T28832] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 766.019871][T28832] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 766.027847][T28832] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 766.035817][T28832] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 766.043790][T28832] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 [ 766.051768][T28832] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 766.059759][T28832] [ 766.135899][T28822] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 766.196080][T28827] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:39:57 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x100000000000000) 12:39:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xf000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xa, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 8) 12:39:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xa, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4c000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 766.273842][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075c29c00: rx timeout, send abort [ 766.282163][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888075c29c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 766.296556][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075c2bc00: rx timeout, send abort [ 766.305012][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888075c2bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 766.341426][T28840] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 766.370021][T28843] FAULT_INJECTION: forcing a failure. [ 766.370021][T28843] name fail_usercopy, interval 1, probability 0, space 0, times 0 12:39:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xb, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 766.370191][T28844] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 766.391565][T28843] CPU: 0 PID: 28843 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 766.403212][T28843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.413314][T28843] Call Trace: [ 766.416614][T28843] [ 766.419562][T28843] dump_stack_lvl+0xcd/0x134 [ 766.424183][T28843] should_fail.cold+0x5/0xa [ 766.428722][T28843] _copy_from_user+0x2c/0x180 [ 766.431562][T28848] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 766.433427][T28843] __copy_msghdr_from_user+0x91/0x4b0 [ 766.433473][T28843] ? __ia32_sys_shutdown+0x70/0x70 [ 766.433501][T28843] ? __lock_acquire+0x1666/0x56c0 [ 766.433549][T28843] ___sys_recvmsg+0xd5/0x200 [ 766.453820][T28850] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 766.458319][T28843] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 766.458375][T28843] ? find_held_lock+0x2d/0x110 [ 766.458408][T28843] ? __might_fault+0xd1/0x170 [ 766.487241][T28843] ? lock_downgrade+0x6e0/0x6e0 [ 766.492149][T28843] do_recvmmsg+0x24d/0x6d0 [ 766.496783][T28843] ? ___sys_recvmsg+0x200/0x200 [ 766.501642][T28843] ? find_held_lock+0x2d/0x110 [ 766.506419][T28843] ? __context_tracking_exit+0xb9/0xe0 [ 766.511913][T28843] ? lock_downgrade+0x6e0/0x6e0 [ 766.516795][T28843] __x64_sys_recvmmsg+0x20b/0x260 [ 766.521841][T28843] ? __do_sys_socketcall+0x590/0x590 [ 766.527126][T28843] ? syscall_enter_from_user_mode+0x21/0x70 [ 766.533044][T28843] do_syscall_64+0x35/0xb0 [ 766.537455][T28843] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 766.543360][T28843] RIP: 0033:0x7f067a2a6049 [ 766.547786][T28843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 766.567497][T28843] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 766.575926][T28843] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 766.583990][T28843] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:39:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 9) [ 766.591969][T28843] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 766.599931][T28843] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 [ 766.607916][T28843] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 766.615919][T28843] [ 766.663265][T28853] FAULT_INJECTION: forcing a failure. [ 766.663265][T28853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.677050][T28853] CPU: 0 PID: 28853 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 766.687583][T28853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.697658][T28853] Call Trace: [ 766.700951][T28853] [ 766.703891][T28853] dump_stack_lvl+0xcd/0x134 [ 766.708594][T28853] should_fail.cold+0x5/0xa [ 766.713129][T28853] _copy_from_user+0x2c/0x180 [ 766.717832][T28853] __copy_msghdr_from_user+0x91/0x4b0 [ 766.723261][T28853] ? __ia32_sys_shutdown+0x70/0x70 [ 766.728400][T28853] ? __lock_acquire+0x1666/0x56c0 [ 766.733452][T28853] ___sys_recvmsg+0xd5/0x200 [ 766.738047][T28853] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 766.743694][T28853] ? find_held_lock+0x2d/0x110 [ 766.748471][T28853] ? __might_fault+0xd1/0x170 [ 766.753179][T28853] ? lock_downgrade+0x6e0/0x6e0 [ 766.758056][T28853] do_recvmmsg+0x24d/0x6d0 [ 766.762485][T28853] ? ___sys_recvmsg+0x200/0x200 [ 766.767362][T28853] ? find_held_lock+0x2d/0x110 [ 766.772134][T28853] ? __context_tracking_exit+0xb9/0xe0 [ 766.777622][T28853] ? lock_downgrade+0x6e0/0x6e0 [ 766.782484][T28853] __x64_sys_recvmmsg+0x20b/0x260 [ 766.787519][T28853] ? __do_sys_socketcall+0x590/0x590 [ 766.792818][T28853] ? syscall_enter_from_user_mode+0x21/0x70 [ 766.798736][T28853] do_syscall_64+0x35/0xb0 [ 766.803156][T28853] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 766.809056][T28853] RIP: 0033:0x7f067a2a6049 [ 766.813478][T28853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 766.833263][T28853] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 766.841708][T28853] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 766.849680][T28853] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 766.857656][T28853] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 766.865630][T28853] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 [ 766.873598][T28853] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 766.881597][T28853] [ 766.891545][T28840] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:39:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 10) [ 766.943398][T28850] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 767.013908][T28859] FAULT_INJECTION: forcing a failure. [ 767.013908][T28859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.032994][T28859] CPU: 1 PID: 28859 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 767.043544][T28859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.053628][T28859] Call Trace: [ 767.056911][T28859] [ 767.059858][T28859] dump_stack_lvl+0xcd/0x134 [ 767.064462][T28859] should_fail.cold+0x5/0xa [ 767.068979][T28859] _copy_from_user+0x2c/0x180 [ 767.073664][T28859] __copy_msghdr_from_user+0x91/0x4b0 [ 767.079043][T28859] ? __ia32_sys_shutdown+0x70/0x70 [ 767.084160][T28859] ? __lock_acquire+0x1666/0x56c0 [ 767.089202][T28859] ___sys_recvmsg+0xd5/0x200 [ 767.093886][T28859] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 767.099536][T28859] ? find_held_lock+0x2d/0x110 [ 767.104314][T28859] ? __might_fault+0xd1/0x170 [ 767.108996][T28859] ? lock_downgrade+0x6e0/0x6e0 [ 767.113867][T28859] do_recvmmsg+0x24d/0x6d0 [ 767.118294][T28859] ? ___sys_recvmsg+0x200/0x200 [ 767.123160][T28859] ? find_held_lock+0x2d/0x110 [ 767.127931][T28859] ? __context_tracking_exit+0xb9/0xe0 [ 767.133415][T28859] ? lock_downgrade+0x6e0/0x6e0 [ 767.138453][T28859] __x64_sys_recvmmsg+0x20b/0x260 [ 767.143489][T28859] ? __do_sys_socketcall+0x590/0x590 [ 767.148980][T28859] ? syscall_enter_from_user_mode+0x21/0x70 [ 767.154895][T28859] do_syscall_64+0x35/0xb0 [ 767.159319][T28859] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 767.165226][T28859] RIP: 0033:0x7f067a2a6049 [ 767.169643][T28859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 767.189276][T28859] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 767.197696][T28859] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 767.205677][T28859] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:39:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xe0ffff, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 767.213648][T28859] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.221619][T28859] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 767.229591][T28859] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 767.237582][T28859] 12:39:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xb, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x60000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x10, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:58 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x200000000000000) 12:39:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 11) 12:39:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xc, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 767.669493][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b932000: rx timeout, send abort [ 767.678127][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b932000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 767.692560][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b932c00: rx timeout, send abort [ 767.701075][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b932c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:39:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xf0ffff, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 767.760777][T28885] FAULT_INJECTION: forcing a failure. [ 767.760777][T28885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.797545][T28885] CPU: 0 PID: 28885 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 767.808106][T28885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.818183][T28885] Call Trace: [ 767.821476][T28885] [ 767.824416][T28885] dump_stack_lvl+0xcd/0x134 [ 767.829034][T28885] should_fail.cold+0x5/0xa [ 767.833567][T28885] _copy_from_user+0x2c/0x180 [ 767.838275][T28885] __copy_msghdr_from_user+0x91/0x4b0 [ 767.843674][T28885] ? __ia32_sys_shutdown+0x70/0x70 [ 767.848812][T28885] ? __lock_acquire+0x1666/0x56c0 [ 767.853880][T28885] ___sys_recvmsg+0xd5/0x200 12:39:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x11, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x68000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 767.858499][T28885] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 767.864173][T28885] ? find_held_lock+0x2d/0x110 [ 767.868966][T28885] ? __might_fault+0xd1/0x170 [ 767.873669][T28885] ? lock_downgrade+0x6e0/0x6e0 [ 767.878566][T28885] do_recvmmsg+0x24d/0x6d0 [ 767.883004][T28885] ? ___sys_recvmsg+0x200/0x200 [ 767.887887][T28885] ? find_held_lock+0x2d/0x110 [ 767.892648][T28885] ? __context_tracking_exit+0xb9/0xe0 [ 767.898109][T28885] ? lock_downgrade+0x6e0/0x6e0 [ 767.902965][T28885] __x64_sys_recvmmsg+0x20b/0x260 [ 767.908018][T28885] ? __do_sys_socketcall+0x590/0x590 [ 767.913335][T28885] ? syscall_enter_from_user_mode+0x21/0x70 [ 767.919278][T28885] do_syscall_64+0x35/0xb0 [ 767.923716][T28885] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 767.929631][T28885] RIP: 0033:0x7f067a2a6049 [ 767.934043][T28885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 767.953671][T28885] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 767.962109][T28885] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 767.970098][T28885] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 767.978084][T28885] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.986076][T28885] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 767.994069][T28885] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 768.002061][T28885] 12:39:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 12) [ 768.106807][T28901] FAULT_INJECTION: forcing a failure. [ 768.106807][T28901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.148471][T28901] CPU: 1 PID: 28901 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 768.159023][T28901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.169095][T28901] Call Trace: [ 768.172381][T28901] [ 768.175318][T28901] dump_stack_lvl+0xcd/0x134 [ 768.179920][T28901] should_fail.cold+0x5/0xa [ 768.184437][T28901] _copy_from_user+0x2c/0x180 [ 768.189108][T28901] __copy_msghdr_from_user+0x91/0x4b0 [ 768.194483][T28901] ? __ia32_sys_shutdown+0x70/0x70 [ 768.199615][T28901] ? __lock_acquire+0x1666/0x56c0 [ 768.204681][T28901] ___sys_recvmsg+0xd5/0x200 [ 768.209298][T28901] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 768.214940][T28901] ? find_held_lock+0x2d/0x110 [ 768.219720][T28901] ? __might_fault+0xd1/0x170 [ 768.224438][T28901] ? lock_downgrade+0x6e0/0x6e0 [ 768.229292][T28901] do_recvmmsg+0x24d/0x6d0 [ 768.233710][T28901] ? ___sys_recvmsg+0x200/0x200 [ 768.238583][T28901] ? find_held_lock+0x2d/0x110 [ 768.243382][T28901] ? __context_tracking_exit+0xb9/0xe0 [ 768.248853][T28901] ? lock_downgrade+0x6e0/0x6e0 [ 768.253737][T28901] __x64_sys_recvmmsg+0x20b/0x260 [ 768.258781][T28901] ? __do_sys_socketcall+0x590/0x590 [ 768.264071][T28901] ? syscall_enter_from_user_mode+0x21/0x70 [ 768.269989][T28901] do_syscall_64+0x35/0xb0 [ 768.274398][T28901] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 768.280285][T28901] RIP: 0033:0x7f067a2a6049 [ 768.284707][T28901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 768.304312][T28901] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 768.312748][T28901] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 768.320732][T28901] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 768.328731][T28901] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 768.336730][T28901] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:39:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 13) [ 768.344704][T28901] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 768.352691][T28901] [ 768.450406][T28907] FAULT_INJECTION: forcing a failure. [ 768.450406][T28907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.499878][T28907] CPU: 0 PID: 28907 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 768.510480][T28907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.520646][T28907] Call Trace: [ 768.523942][T28907] [ 768.526893][T28907] dump_stack_lvl+0xcd/0x134 [ 768.531514][T28907] should_fail.cold+0x5/0xa [ 768.536064][T28907] _copy_from_user+0x2c/0x180 [ 768.540772][T28907] __copy_msghdr_from_user+0x91/0x4b0 [ 768.546177][T28907] ? __ia32_sys_shutdown+0x70/0x70 [ 768.551322][T28907] ? __lock_acquire+0x1666/0x56c0 [ 768.556399][T28907] ___sys_recvmsg+0xd5/0x200 [ 768.561017][T28907] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 768.566688][T28907] ? find_held_lock+0x2d/0x110 [ 768.571489][T28907] ? __might_fault+0xd1/0x170 [ 768.576195][T28907] ? lock_downgrade+0x6e0/0x6e0 [ 768.581104][T28907] do_recvmmsg+0x24d/0x6d0 [ 768.585556][T28907] ? ___sys_recvmsg+0x200/0x200 [ 768.590447][T28907] ? find_held_lock+0x2d/0x110 [ 768.595260][T28907] ? __context_tracking_exit+0xb9/0xe0 [ 768.600748][T28907] ? lock_downgrade+0x6e0/0x6e0 [ 768.605618][T28907] __x64_sys_recvmmsg+0x20b/0x260 [ 768.610671][T28907] ? __do_sys_socketcall+0x590/0x590 [ 768.615966][T28907] ? syscall_enter_from_user_mode+0x21/0x70 [ 768.621884][T28907] do_syscall_64+0x35/0xb0 [ 768.626308][T28907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 768.632217][T28907] RIP: 0033:0x7f067a2a6049 [ 768.636650][T28907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 768.656264][T28907] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 768.664682][T28907] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 768.672787][T28907] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 768.680771][T28907] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 768.688869][T28907] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:39:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xe, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:39:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 14) [ 768.696851][T28907] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 768.704843][T28907] 12:39:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x68, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 768.787402][T28915] FAULT_INJECTION: forcing a failure. [ 768.787402][T28915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.821504][T28915] CPU: 0 PID: 28915 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 768.832085][T28915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.842154][T28915] Call Trace: [ 768.845446][T28915] [ 768.848403][T28915] dump_stack_lvl+0xcd/0x134 [ 768.853110][T28915] should_fail.cold+0x5/0xa [ 768.857658][T28915] _copy_from_user+0x2c/0x180 [ 768.862353][T28915] __copy_msghdr_from_user+0x91/0x4b0 [ 768.867824][T28915] ? __ia32_sys_shutdown+0x70/0x70 [ 768.872957][T28915] ? __lock_acquire+0x1666/0x56c0 [ 768.878035][T28915] ___sys_recvmsg+0xd5/0x200 [ 768.882644][T28915] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 768.888296][T28915] ? find_held_lock+0x2d/0x110 [ 768.893082][T28915] ? __might_fault+0xd1/0x170 [ 768.897780][T28915] ? lock_downgrade+0x6e0/0x6e0 [ 768.902643][T28915] do_recvmmsg+0x24d/0x6d0 [ 768.907080][T28915] ? ___sys_recvmsg+0x200/0x200 [ 768.911961][T28915] ? find_held_lock+0x2d/0x110 [ 768.916738][T28915] ? __context_tracking_exit+0xb9/0xe0 [ 768.922233][T28915] ? lock_downgrade+0x6e0/0x6e0 [ 768.927099][T28915] __x64_sys_recvmmsg+0x20b/0x260 [ 768.932159][T28915] ? __do_sys_socketcall+0x590/0x590 [ 768.937481][T28915] ? syscall_enter_from_user_mode+0x21/0x70 [ 768.943446][T28915] do_syscall_64+0x35/0xb0 [ 768.947895][T28915] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 768.953811][T28915] RIP: 0033:0x7f067a2a6049 [ 768.958238][T28915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 768.977864][T28915] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 768.986310][T28915] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 768.994304][T28915] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 769.002290][T28915] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 769.003657][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a7ac400: rx timeout, send abort [ 769.010267][T28915] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 769.010288][T28915] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 769.010326][T28915] 12:40:00 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x300000000000000) 12:40:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6c000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3000, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 15) [ 769.039073][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a7ac400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 769.053578][ C1] vcan0: j1939_tp_rxtimer: 0xffff888018ef3c00: rx timeout, send abort [ 769.062745][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888018ef3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 769.155031][T28925] FAULT_INJECTION: forcing a failure. [ 769.155031][T28925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.195703][T28925] CPU: 0 PID: 28925 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 769.206261][T28925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.216394][T28925] Call Trace: [ 769.219687][T28925] [ 769.222635][T28925] dump_stack_lvl+0xcd/0x134 [ 769.227258][T28925] should_fail.cold+0x5/0xa [ 769.231831][T28925] _copy_from_user+0x2c/0x180 [ 769.236561][T28925] __copy_msghdr_from_user+0x91/0x4b0 [ 769.241963][T28925] ? __ia32_sys_shutdown+0x70/0x70 [ 769.247266][T28925] ? __lock_acquire+0x1666/0x56c0 [ 769.252318][T28925] ___sys_recvmsg+0xd5/0x200 [ 769.256924][T28925] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 769.262592][T28925] ? find_held_lock+0x2d/0x110 [ 769.267352][T28925] ? __might_fault+0xd1/0x170 [ 769.272039][T28925] ? lock_downgrade+0x6e0/0x6e0 [ 769.276931][T28925] do_recvmmsg+0x24d/0x6d0 [ 769.281347][T28925] ? ___sys_recvmsg+0x200/0x200 [ 769.286228][T28925] ? find_held_lock+0x2d/0x110 [ 769.291022][T28925] ? __context_tracking_exit+0xb9/0xe0 [ 769.296513][T28925] ? lock_downgrade+0x6e0/0x6e0 [ 769.301380][T28925] __x64_sys_recvmmsg+0x20b/0x260 [ 769.306438][T28925] ? __do_sys_socketcall+0x590/0x590 [ 769.311751][T28925] ? syscall_enter_from_user_mode+0x21/0x70 [ 769.317680][T28925] do_syscall_64+0x35/0xb0 [ 769.322104][T28925] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 769.328063][T28925] RIP: 0033:0x7f067a2a6049 [ 769.332479][T28925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 769.352091][T28925] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 769.360512][T28925] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 769.368481][T28925] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 769.376453][T28925] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 769.384436][T28925] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:40:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x5, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 16) [ 769.392410][T28925] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 769.400396][T28925] [ 769.500932][T28937] FAULT_INJECTION: forcing a failure. [ 769.500932][T28937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.552939][T28937] CPU: 1 PID: 28937 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 769.563500][T28937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.573576][T28937] Call Trace: [ 769.576865][T28937] [ 769.579805][T28937] dump_stack_lvl+0xcd/0x134 [ 769.584446][T28937] should_fail.cold+0x5/0xa [ 769.588979][T28937] _copy_from_user+0x2c/0x180 [ 769.593699][T28937] __copy_msghdr_from_user+0x91/0x4b0 [ 769.599096][T28937] ? __ia32_sys_shutdown+0x70/0x70 [ 769.604235][T28937] ? __lock_acquire+0x1666/0x56c0 [ 769.609283][T28937] ___sys_recvmsg+0xd5/0x200 [ 769.613879][T28937] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 769.619527][T28937] ? find_held_lock+0x2d/0x110 [ 769.624301][T28937] ? __might_fault+0xd1/0x170 [ 769.628985][T28937] ? lock_downgrade+0x6e0/0x6e0 [ 769.633870][T28937] do_recvmmsg+0x24d/0x6d0 [ 769.638303][T28937] ? ___sys_recvmsg+0x200/0x200 [ 769.643170][T28937] ? find_held_lock+0x2d/0x110 [ 769.647946][T28937] ? __context_tracking_exit+0xb9/0xe0 [ 769.653417][T28937] ? lock_downgrade+0x6e0/0x6e0 [ 769.658277][T28937] __x64_sys_recvmmsg+0x20b/0x260 [ 769.663306][T28937] ? __do_sys_socketcall+0x590/0x590 [ 769.668596][T28937] ? syscall_enter_from_user_mode+0x21/0x70 [ 769.674503][T28937] do_syscall_64+0x35/0xb0 [ 769.678923][T28937] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 769.684828][T28937] RIP: 0033:0x7f067a2a6049 [ 769.689243][T28937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 769.708855][T28937] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 769.717362][T28937] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 769.725333][T28937] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 769.733318][T28937] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 769.741395][T28937] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:40:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x12, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x2000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 769.749378][T28937] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 769.757382][T28937] 12:40:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 17) 12:40:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x74000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 769.889253][T28948] FAULT_INJECTION: forcing a failure. [ 769.889253][T28948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.904665][T28948] CPU: 0 PID: 28948 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 769.915209][T28948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.925283][T28948] Call Trace: [ 769.928582][T28948] [ 769.931522][T28948] dump_stack_lvl+0xcd/0x134 [ 769.936141][T28948] should_fail.cold+0x5/0xa [ 769.940677][T28948] _copy_from_user+0x2c/0x180 [ 769.945380][T28948] __copy_msghdr_from_user+0x91/0x4b0 [ 769.950779][T28948] ? __ia32_sys_shutdown+0x70/0x70 [ 769.955942][T28948] ? __lock_acquire+0x1666/0x56c0 [ 769.961011][T28948] ___sys_recvmsg+0xd5/0x200 [ 769.965623][T28948] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 769.971402][T28948] ? find_held_lock+0x2d/0x110 [ 769.976179][T28948] ? __might_fault+0xd1/0x170 [ 769.981026][T28948] ? lock_downgrade+0x6e0/0x6e0 [ 769.985980][T28948] do_recvmmsg+0x24d/0x6d0 [ 769.990431][T28948] ? ___sys_recvmsg+0x200/0x200 [ 769.995327][T28948] ? find_held_lock+0x2d/0x110 [ 770.000109][T28948] ? __context_tracking_exit+0xb9/0xe0 [ 770.005584][T28948] ? lock_downgrade+0x6e0/0x6e0 [ 770.010453][T28948] __x64_sys_recvmmsg+0x20b/0x260 [ 770.015580][T28948] ? __do_sys_socketcall+0x590/0x590 [ 770.020876][T28948] ? syscall_enter_from_user_mode+0x21/0x70 [ 770.026789][T28948] do_syscall_64+0x35/0xb0 [ 770.031215][T28948] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 770.037204][T28948] RIP: 0033:0x7f067a2a6049 [ 770.041619][T28948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 770.061228][T28948] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 770.069647][T28948] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 770.077619][T28948] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 770.085590][T28948] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 770.093558][T28948] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 770.101529][T28948] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 770.109527][T28948] 12:40:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 18) 12:40:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x7, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 770.230495][T28956] FAULT_INJECTION: forcing a failure. [ 770.230495][T28956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.250460][T28956] CPU: 0 PID: 28956 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 770.261000][T28956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.271062][T28956] Call Trace: [ 770.274351][T28956] [ 770.277284][T28956] dump_stack_lvl+0xcd/0x134 [ 770.281911][T28956] should_fail.cold+0x5/0xa [ 770.286437][T28956] _copy_from_user+0x2c/0x180 [ 770.291142][T28956] __copy_msghdr_from_user+0x91/0x4b0 [ 770.296532][T28956] ? __ia32_sys_shutdown+0x70/0x70 [ 770.301640][T28956] ? __lock_acquire+0x1666/0x56c0 [ 770.306788][T28956] ___sys_recvmsg+0xd5/0x200 [ 770.311401][T28956] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 770.317060][T28956] ? find_held_lock+0x2d/0x110 [ 770.321832][T28956] ? __might_fault+0xd1/0x170 [ 770.326526][T28956] ? lock_downgrade+0x6e0/0x6e0 [ 770.331408][T28956] do_recvmmsg+0x24d/0x6d0 [ 770.335824][T28956] ? ___sys_recvmsg+0x200/0x200 [ 770.340677][T28956] ? find_held_lock+0x2d/0x110 [ 770.345443][T28956] ? __context_tracking_exit+0xb9/0xe0 [ 770.350933][T28956] ? lock_downgrade+0x6e0/0x6e0 [ 770.355805][T28956] __x64_sys_recvmmsg+0x20b/0x260 [ 770.360827][T28956] ? __do_sys_socketcall+0x590/0x590 [ 770.366115][T28956] ? syscall_enter_from_user_mode+0x21/0x70 [ 770.372040][T28956] do_syscall_64+0x35/0xb0 [ 770.376467][T28956] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 770.382370][T28956] RIP: 0033:0x7f067a2a6049 [ 770.386790][T28956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 770.406414][T28956] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 770.414859][T28956] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 770.422842][T28956] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 770.430825][T28956] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 770.438801][T28956] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 770.446770][T28956] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 770.454766][T28956] [ 770.459168][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa28000: rx timeout, send abort [ 770.467526][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa2bc00: rx timeout, send abort [ 770.476477][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807aa28000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 770.490932][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807aa2bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:01 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x400000000000000) 12:40:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 19) [ 770.619548][T28967] FAULT_INJECTION: forcing a failure. [ 770.619548][T28967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.658838][T28967] CPU: 0 PID: 28967 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 770.669400][T28967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.679479][T28967] Call Trace: [ 770.682781][T28967] [ 770.685728][T28967] dump_stack_lvl+0xcd/0x134 [ 770.690359][T28967] should_fail.cold+0x5/0xa [ 770.694911][T28967] _copy_from_user+0x2c/0x180 [ 770.699619][T28967] __copy_msghdr_from_user+0x91/0x4b0 [ 770.705021][T28967] ? __ia32_sys_shutdown+0x70/0x70 [ 770.710163][T28967] ? __lock_acquire+0x1666/0x56c0 [ 770.715232][T28967] ___sys_recvmsg+0xd5/0x200 [ 770.719960][T28967] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 770.725643][T28967] ? find_held_lock+0x2d/0x110 [ 770.730452][T28967] ? __might_fault+0xd1/0x170 [ 770.735161][T28967] ? lock_downgrade+0x6e0/0x6e0 [ 770.740060][T28967] do_recvmmsg+0x24d/0x6d0 [ 770.744509][T28967] ? ___sys_recvmsg+0x200/0x200 [ 770.749436][T28967] ? find_held_lock+0x2d/0x110 [ 770.754233][T28967] ? __context_tracking_exit+0xb9/0xe0 [ 770.759729][T28967] ? lock_downgrade+0x6e0/0x6e0 [ 770.764610][T28967] __x64_sys_recvmmsg+0x20b/0x260 [ 770.769663][T28967] ? __do_sys_socketcall+0x590/0x590 [ 770.775001][T28967] ? syscall_enter_from_user_mode+0x21/0x70 [ 770.780935][T28967] do_syscall_64+0x35/0xb0 [ 770.785384][T28967] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 770.791303][T28967] RIP: 0033:0x7f067a2a6049 [ 770.795722][T28967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:40:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 20) [ 770.815357][T28967] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 770.823805][T28967] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 770.831802][T28967] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 770.839857][T28967] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 770.848098][T28967] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 770.856092][T28967] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 770.864098][T28967] 12:40:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x14, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 770.907946][T28971] FAULT_INJECTION: forcing a failure. [ 770.907946][T28971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.922403][T28971] CPU: 1 PID: 28971 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 770.932941][T28971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.943017][T28971] Call Trace: [ 770.946310][T28971] [ 770.949253][T28971] dump_stack_lvl+0xcd/0x134 [ 770.953870][T28971] should_fail.cold+0x5/0xa [ 770.953960][T28973] __nla_validate_parse: 44 callbacks suppressed [ 770.953978][T28973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 770.958401][T28971] _copy_from_user+0x2c/0x180 [ 770.958440][T28971] __copy_msghdr_from_user+0x91/0x4b0 [ 770.958475][T28971] ? __ia32_sys_shutdown+0x70/0x70 [ 770.958502][T28971] ? __lock_acquire+0x1666/0x56c0 [ 770.994068][T28971] ___sys_recvmsg+0xd5/0x200 [ 770.998671][T28971] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 771.004450][T28971] ? find_held_lock+0x2d/0x110 [ 771.009244][T28971] ? __might_fault+0xd1/0x170 [ 771.014034][T28971] ? lock_downgrade+0x6e0/0x6e0 [ 771.018908][T28971] do_recvmmsg+0x24d/0x6d0 [ 771.023348][T28971] ? ___sys_recvmsg+0x200/0x200 [ 771.028197][T28971] ? find_held_lock+0x2d/0x110 [ 771.032965][T28971] ? __context_tracking_exit+0xb9/0xe0 [ 771.038561][T28971] ? lock_downgrade+0x6e0/0x6e0 [ 771.043423][T28971] __x64_sys_recvmmsg+0x20b/0x260 [ 771.048471][T28971] ? __do_sys_socketcall+0x590/0x590 [ 771.053761][T28971] ? syscall_enter_from_user_mode+0x21/0x70 [ 771.059701][T28971] do_syscall_64+0x35/0xb0 [ 771.064117][T28971] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 771.070006][T28971] RIP: 0033:0x7f067a2a6049 [ 771.074416][T28971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 771.094042][T28971] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 771.102486][T28971] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 771.110451][T28971] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 771.118415][T28971] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 771.126404][T28971] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 771.134389][T28971] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 771.142384][T28971] 12:40:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x3000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7a000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x9, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 21) [ 771.261456][T28983] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 771.263224][T28981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 771.281342][T28982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 771.296166][T28984] FAULT_INJECTION: forcing a failure. [ 771.296166][T28984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.309753][T28984] CPU: 0 PID: 28984 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 771.320306][T28984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.321447][T28973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 771.330464][T28984] Call Trace: [ 771.330481][T28984] [ 771.330492][T28984] dump_stack_lvl+0xcd/0x134 [ 771.330529][T28984] should_fail.cold+0x5/0xa [ 771.330563][T28984] _copy_from_user+0x2c/0x180 [ 771.330595][T28984] __copy_msghdr_from_user+0x91/0x4b0 [ 771.330623][T28984] ? __ia32_sys_shutdown+0x70/0x70 [ 771.330648][T28984] ? __lock_acquire+0x1666/0x56c0 [ 771.330691][T28984] ___sys_recvmsg+0xd5/0x200 [ 771.330716][T28984] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 771.330755][T28984] ? find_held_lock+0x2d/0x110 [ 771.330789][T28984] ? __might_fault+0xd1/0x170 [ 771.330820][T28984] ? lock_downgrade+0x6e0/0x6e0 [ 771.330866][T28984] do_recvmmsg+0x24d/0x6d0 [ 771.330899][T28984] ? ___sys_recvmsg+0x200/0x200 [ 771.330936][T28984] ? find_held_lock+0x2d/0x110 [ 771.414539][T28984] ? __context_tracking_exit+0xb9/0xe0 [ 771.420120][T28984] ? lock_downgrade+0x6e0/0x6e0 [ 771.425002][T28984] __x64_sys_recvmmsg+0x20b/0x260 [ 771.430038][T28984] ? __do_sys_socketcall+0x590/0x590 [ 771.435345][T28984] ? syscall_enter_from_user_mode+0x21/0x70 [ 771.441269][T28984] do_syscall_64+0x35/0xb0 [ 771.445687][T28984] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 771.451579][T28984] RIP: 0033:0x7f067a2a6049 [ 771.456015][T28984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 771.475629][T28984] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 771.484069][T28984] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 771.492056][T28984] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 771.500036][T28984] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 12:40:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 22) [ 771.508011][T28984] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 771.516186][T28984] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 771.524191][T28984] [ 771.576694][T28987] FAULT_INJECTION: forcing a failure. [ 771.576694][T28987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.604389][T28987] CPU: 1 PID: 28987 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 771.615065][T28987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.625144][T28987] Call Trace: [ 771.628442][T28987] [ 771.631398][T28987] dump_stack_lvl+0xcd/0x134 [ 771.636016][T28987] should_fail.cold+0x5/0xa [ 771.640557][T28987] _copy_from_user+0x2c/0x180 [ 771.645273][T28987] __copy_msghdr_from_user+0x91/0x4b0 [ 771.650677][T28987] ? __ia32_sys_shutdown+0x70/0x70 [ 771.655815][T28987] ? __lock_acquire+0x1666/0x56c0 [ 771.660938][T28987] ___sys_recvmsg+0xd5/0x200 [ 771.665559][T28987] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 771.667560][T28981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 771.671222][T28987] ? find_held_lock+0x2d/0x110 [ 771.671264][T28987] ? __might_fault+0xd1/0x170 [ 771.689997][T28987] ? lock_downgrade+0x6e0/0x6e0 [ 771.695048][T28987] do_recvmmsg+0x24d/0x6d0 [ 771.699484][T28987] ? ___sys_recvmsg+0x200/0x200 [ 771.704453][T28987] ? find_held_lock+0x2d/0x110 [ 771.709321][T28987] ? __context_tracking_exit+0xb9/0xe0 [ 771.714792][T28987] ? lock_downgrade+0x6e0/0x6e0 [ 771.719657][T28987] __x64_sys_recvmmsg+0x20b/0x260 [ 771.724692][T28987] ? __do_sys_socketcall+0x590/0x590 [ 771.729982][T28987] ? syscall_enter_from_user_mode+0x21/0x70 [ 771.735928][T28987] do_syscall_64+0x35/0xb0 [ 771.740350][T28987] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 771.746266][T28987] RIP: 0033:0x7f067a2a6049 [ 771.750705][T28987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 771.770317][T28987] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 771.778868][T28987] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 771.786858][T28987] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 771.794851][T28987] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 771.802932][T28987] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 771.810903][T28987] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 771.818913][T28987] [ 771.836639][T28982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 771.849845][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801aaf9800: rx timeout, send abort [ 771.857752][T28983] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 771.858346][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801aaf8c00: rx timeout, send abort 12:40:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x16, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:03 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x700000000000000) 12:40:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 23) [ 771.879773][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801aaf9800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 771.894316][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801aaf8c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 771.997113][T28999] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 772.033977][T29001] FAULT_INJECTION: forcing a failure. [ 772.033977][T29001] name fail_usercopy, interval 1, probability 0, space 0, times 0 12:40:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x94000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 772.054283][T28981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x68, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 772.182565][T29001] CPU: 1 PID: 29001 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 772.193150][T29001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.203225][T29001] Call Trace: [ 772.206518][T29001] [ 772.209463][T29001] dump_stack_lvl+0xcd/0x134 [ 772.214083][T29001] should_fail.cold+0x5/0xa [ 772.218643][T29001] _copy_from_user+0x2c/0x180 [ 772.223344][T29001] __copy_msghdr_from_user+0x91/0x4b0 [ 772.228722][T29001] ? __ia32_sys_shutdown+0x70/0x70 [ 772.233853][T29001] ? __lock_acquire+0x1666/0x56c0 [ 772.239002][T29001] ___sys_recvmsg+0xd5/0x200 [ 772.243630][T29001] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 772.249301][T29001] ? find_held_lock+0x2d/0x110 [ 772.254225][T29001] ? __might_fault+0xd1/0x170 [ 772.258915][T29001] ? lock_downgrade+0x6e0/0x6e0 [ 772.263791][T29001] do_recvmmsg+0x24d/0x6d0 [ 772.268239][T29001] ? ___sys_recvmsg+0x200/0x200 [ 772.273097][T29001] ? find_held_lock+0x2d/0x110 [ 772.277899][T29001] ? __context_tracking_exit+0xb9/0xe0 [ 772.283367][T29001] ? lock_downgrade+0x6e0/0x6e0 [ 772.288500][T29001] __x64_sys_recvmmsg+0x20b/0x260 [ 772.293541][T29001] ? __do_sys_socketcall+0x590/0x590 [ 772.298870][T29001] ? syscall_enter_from_user_mode+0x21/0x70 [ 772.304776][T29001] do_syscall_64+0x35/0xb0 [ 772.309235][T29001] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 772.315245][T29001] RIP: 0033:0x7f067a2a6049 [ 772.319659][T29001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 772.339291][T29001] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 772.347713][T29001] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 772.355694][T29001] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 772.363658][T29001] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 772.371617][T29001] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:40:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 24) [ 772.379584][T29001] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 772.387556][T29001] [ 772.482339][T29016] FAULT_INJECTION: forcing a failure. [ 772.482339][T29016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.546183][T29016] CPU: 1 PID: 29016 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 772.556866][T29016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.567116][T29016] Call Trace: [ 772.570511][T29016] [ 772.573454][T29016] dump_stack_lvl+0xcd/0x134 [ 772.578078][T29016] should_fail.cold+0x5/0xa [ 772.582614][T29016] _copy_from_user+0x2c/0x180 [ 772.587328][T29016] __copy_msghdr_from_user+0x91/0x4b0 [ 772.592737][T29016] ? __ia32_sys_shutdown+0x70/0x70 [ 772.597896][T29016] ? __lock_acquire+0x1666/0x56c0 [ 772.602966][T29016] ___sys_recvmsg+0xd5/0x200 [ 772.607592][T29016] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 772.613268][T29016] ? find_held_lock+0x2d/0x110 [ 772.618066][T29016] ? __might_fault+0xd1/0x170 [ 772.622775][T29016] ? lock_downgrade+0x6e0/0x6e0 [ 772.627668][T29016] do_recvmmsg+0x24d/0x6d0 [ 772.632127][T29016] ? ___sys_recvmsg+0x200/0x200 [ 772.637004][T29016] ? find_held_lock+0x2d/0x110 [ 772.641799][T29016] ? __context_tracking_exit+0xb9/0xe0 [ 772.647260][T29016] ? lock_downgrade+0x6e0/0x6e0 [ 772.652110][T29016] __x64_sys_recvmmsg+0x20b/0x260 [ 772.657493][T29016] ? __do_sys_socketcall+0x590/0x590 [ 772.662801][T29016] ? syscall_enter_from_user_mode+0x21/0x70 [ 772.668714][T29016] do_syscall_64+0x35/0xb0 [ 772.673212][T29016] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 772.679203][T29016] RIP: 0033:0x7f067a2a6049 [ 772.683614][T29016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 772.703217][T29016] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 772.711626][T29016] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 772.719675][T29016] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 772.727636][T29016] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 772.735604][T29016] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:40:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 25) [ 772.743589][T29016] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 772.751584][T29016] 12:40:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x9b000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x18, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 772.832753][T29024] FAULT_INJECTION: forcing a failure. [ 772.832753][T29024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.882543][T29024] CPU: 0 PID: 29024 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 772.893285][T29024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.903363][T29024] Call Trace: [ 772.906668][T29024] [ 772.909615][T29024] dump_stack_lvl+0xcd/0x134 [ 772.914236][T29024] should_fail.cold+0x5/0xa [ 772.918779][T29024] _copy_from_user+0x2c/0x180 [ 772.923491][T29024] __copy_msghdr_from_user+0x91/0x4b0 [ 772.928891][T29024] ? __ia32_sys_shutdown+0x70/0x70 [ 772.934030][T29024] ? __lock_acquire+0x1666/0x56c0 [ 772.939098][T29024] ___sys_recvmsg+0xd5/0x200 [ 772.943716][T29024] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 772.949394][T29024] ? find_held_lock+0x2d/0x110 [ 772.954186][T29024] ? __might_fault+0xd1/0x170 [ 772.958886][T29024] ? lock_downgrade+0x6e0/0x6e0 [ 772.963782][T29024] do_recvmmsg+0x24d/0x6d0 [ 772.968230][T29024] ? ___sys_recvmsg+0x200/0x200 [ 772.973199][T29024] ? find_held_lock+0x2d/0x110 [ 772.977988][T29024] ? __context_tracking_exit+0xb9/0xe0 [ 772.983479][T29024] ? lock_downgrade+0x6e0/0x6e0 [ 772.988363][T29024] __x64_sys_recvmmsg+0x20b/0x260 [ 772.993423][T29024] ? __do_sys_socketcall+0x590/0x590 [ 772.998732][T29024] ? syscall_enter_from_user_mode+0x21/0x70 [ 773.004663][T29024] do_syscall_64+0x35/0xb0 [ 773.009105][T29024] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 773.015024][T29024] RIP: 0033:0x7f067a2a6049 [ 773.019452][T29024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 773.039058][T29024] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 773.047503][T29024] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 773.055476][T29024] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 773.063459][T29024] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 773.071438][T29024] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:40:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 26) 12:40:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x5000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 773.079407][T29024] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 773.087438][T29024] 12:40:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 773.161086][T29032] FAULT_INJECTION: forcing a failure. [ 773.161086][T29032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.207588][T29032] CPU: 0 PID: 29032 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 773.218143][T29032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.228228][T29032] Call Trace: [ 773.231528][T29032] [ 773.232521][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d94d800: rx timeout, send abort [ 773.234466][T29032] dump_stack_lvl+0xcd/0x134 [ 773.234502][T29032] should_fail.cold+0x5/0xa [ 773.234538][T29032] _copy_from_user+0x2c/0x180 [ 773.234573][T29032] __copy_msghdr_from_user+0x91/0x4b0 [ 773.234607][T29032] ? __ia32_sys_shutdown+0x70/0x70 [ 773.243524][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d94d800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 773.247586][T29032] ? __lock_acquire+0x1666/0x56c0 [ 773.247642][T29032] ___sys_recvmsg+0xd5/0x200 [ 773.247673][T29032] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 773.252280][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d94ec00: rx timeout, send abort [ 773.256834][T29032] ? find_held_lock+0x2d/0x110 [ 773.256874][T29032] ? __might_fault+0xd1/0x170 [ 773.283670][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d94ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 773.286565][T29032] ? lock_downgrade+0x6e0/0x6e0 [ 773.286620][T29032] do_recvmmsg+0x24d/0x6d0 [ 773.286657][T29032] ? ___sys_recvmsg+0x200/0x200 [ 773.342737][T29032] ? find_held_lock+0x2d/0x110 [ 773.347535][T29032] ? __context_tracking_exit+0xb9/0xe0 [ 773.353026][T29032] ? lock_downgrade+0x6e0/0x6e0 [ 773.357909][T29032] __x64_sys_recvmmsg+0x20b/0x260 [ 773.362957][T29032] ? __do_sys_socketcall+0x590/0x590 [ 773.368265][T29032] ? syscall_enter_from_user_mode+0x21/0x70 [ 773.374187][T29032] do_syscall_64+0x35/0xb0 [ 773.378627][T29032] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 773.384545][T29032] RIP: 0033:0x7f067a2a6049 [ 773.388976][T29032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 773.408690][T29032] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 773.417217][T29032] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 773.425560][T29032] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 773.433562][T29032] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 773.441556][T29032] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 773.449546][T29032] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 12:40:04 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x800000000000000) 12:40:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x2, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 773.457537][T29032] 12:40:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 27) 12:40:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x9b090000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 773.603771][T29053] FAULT_INJECTION: forcing a failure. [ 773.603771][T29053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.632934][T29053] CPU: 1 PID: 29053 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 773.643500][T29053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.653575][T29053] Call Trace: [ 773.656871][T29053] [ 773.659822][T29053] dump_stack_lvl+0xcd/0x134 [ 773.664439][T29053] should_fail.cold+0x5/0xa [ 773.668987][T29053] _copy_from_user+0x2c/0x180 [ 773.673699][T29053] __copy_msghdr_from_user+0x91/0x4b0 [ 773.679110][T29053] ? __ia32_sys_shutdown+0x70/0x70 [ 773.684264][T29053] ? __lock_acquire+0x1666/0x56c0 [ 773.689613][T29053] ___sys_recvmsg+0xd5/0x200 [ 773.694265][T29053] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 773.699946][T29053] ? find_held_lock+0x2d/0x110 [ 773.704846][T29053] ? __might_fault+0xd1/0x170 [ 773.709537][T29053] ? lock_downgrade+0x6e0/0x6e0 [ 773.714396][T29053] do_recvmmsg+0x24d/0x6d0 [ 773.718837][T29053] ? ___sys_recvmsg+0x200/0x200 [ 773.723707][T29053] ? find_held_lock+0x2d/0x110 [ 773.728485][T29053] ? __context_tracking_exit+0xb9/0xe0 [ 773.733946][T29053] ? lock_downgrade+0x6e0/0x6e0 [ 773.738797][T29053] __x64_sys_recvmmsg+0x20b/0x260 [ 773.743834][T29053] ? __do_sys_socketcall+0x590/0x590 [ 773.749118][T29053] ? syscall_enter_from_user_mode+0x21/0x70 [ 773.755014][T29053] do_syscall_64+0x35/0xb0 [ 773.759431][T29053] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 773.765324][T29053] RIP: 0033:0x7f067a2a6049 [ 773.769739][T29053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 773.789351][T29053] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 773.797767][T29053] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 773.805740][T29053] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 773.813702][T29053] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 773.821664][T29053] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 773.829626][T29053] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 773.837599][T29053] 12:40:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 28) 12:40:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x19, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 773.916724][T29058] FAULT_INJECTION: forcing a failure. [ 773.916724][T29058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.947967][T29058] CPU: 1 PID: 29058 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 773.958531][T29058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.968612][T29058] Call Trace: [ 773.971908][T29058] [ 773.974862][T29058] dump_stack_lvl+0xcd/0x134 [ 773.979473][T29058] should_fail.cold+0x5/0xa [ 773.984005][T29058] _copy_from_user+0x2c/0x180 [ 773.988700][T29058] __copy_msghdr_from_user+0x91/0x4b0 [ 773.994100][T29058] ? __ia32_sys_shutdown+0x70/0x70 [ 773.999217][T29058] ? __lock_acquire+0x1666/0x56c0 [ 774.004279][T29058] ___sys_recvmsg+0xd5/0x200 [ 774.008893][T29058] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 774.014545][T29058] ? find_held_lock+0x2d/0x110 [ 774.019323][T29058] ? __might_fault+0xd1/0x170 [ 774.024009][T29058] ? lock_downgrade+0x6e0/0x6e0 [ 774.028882][T29058] do_recvmmsg+0x24d/0x6d0 [ 774.033313][T29058] ? ___sys_recvmsg+0x200/0x200 [ 774.038179][T29058] ? find_held_lock+0x2d/0x110 [ 774.042956][T29058] ? __context_tracking_exit+0xb9/0xe0 [ 774.048613][T29058] ? lock_downgrade+0x6e0/0x6e0 [ 774.053483][T29058] __x64_sys_recvmmsg+0x20b/0x260 [ 774.058521][T29058] ? __do_sys_socketcall+0x590/0x590 [ 774.063830][T29058] ? syscall_enter_from_user_mode+0x21/0x70 [ 774.069755][T29058] do_syscall_64+0x35/0xb0 [ 774.074179][T29058] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 774.080078][T29058] RIP: 0033:0x7f067a2a6049 [ 774.084495][T29058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 774.104121][T29058] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 12:40:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 29) [ 774.112551][T29058] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 774.120525][T29058] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 774.128494][T29058] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 774.136482][T29058] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 774.144451][T29058] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 774.152438][T29058] [ 774.248945][T29068] FAULT_INJECTION: forcing a failure. [ 774.248945][T29068] name fail_usercopy, interval 1, probability 0, space 0, times 0 12:40:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x3, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 774.306975][T29068] CPU: 0 PID: 29068 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 774.317536][T29068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.327705][T29068] Call Trace: [ 774.330998][T29068] [ 774.333938][T29068] dump_stack_lvl+0xcd/0x134 [ 774.338557][T29068] should_fail.cold+0x5/0xa [ 774.343091][T29068] _copy_from_user+0x2c/0x180 [ 774.347794][T29068] __copy_msghdr_from_user+0x91/0x4b0 [ 774.353188][T29068] ? __ia32_sys_shutdown+0x70/0x70 [ 774.358322][T29068] ? __lock_acquire+0x1666/0x56c0 [ 774.363397][T29068] ___sys_recvmsg+0xd5/0x200 [ 774.368048][T29068] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 774.373738][T29068] ? find_held_lock+0x2d/0x110 [ 774.378526][T29068] ? __might_fault+0xd1/0x170 [ 774.383205][T29068] ? lock_downgrade+0x6e0/0x6e0 [ 774.388100][T29068] do_recvmmsg+0x24d/0x6d0 [ 774.392649][T29068] ? ___sys_recvmsg+0x200/0x200 [ 774.397500][T29068] ? find_held_lock+0x2d/0x110 [ 774.402284][T29068] ? __context_tracking_exit+0xb9/0xe0 [ 774.407747][T29068] ? lock_downgrade+0x6e0/0x6e0 [ 774.412628][T29068] __x64_sys_recvmmsg+0x20b/0x260 [ 774.417664][T29068] ? __do_sys_socketcall+0x590/0x590 [ 774.423064][T29068] ? syscall_enter_from_user_mode+0x21/0x70 [ 774.428979][T29068] do_syscall_64+0x35/0xb0 [ 774.433444][T29068] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 774.439348][T29068] RIP: 0033:0x7f067a2a6049 [ 774.443940][T29068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 774.463572][T29068] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 774.471991][T29068] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 774.479967][T29068] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 774.487947][T29068] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 774.495939][T29068] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:40:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x9effffff, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 30) [ 774.503913][T29068] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 774.511903][T29068] [ 774.632369][T29079] FAULT_INJECTION: forcing a failure. [ 774.632369][T29079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.673328][T29079] CPU: 1 PID: 29079 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 774.683924][T29079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.694007][T29079] Call Trace: [ 774.697303][T29079] [ 774.700249][T29079] dump_stack_lvl+0xcd/0x134 [ 774.704868][T29079] should_fail.cold+0x5/0xa [ 774.709415][T29079] _copy_from_user+0x2c/0x180 [ 774.714132][T29079] __copy_msghdr_from_user+0x91/0x4b0 [ 774.719625][T29079] ? __ia32_sys_shutdown+0x70/0x70 [ 774.724764][T29079] ? __lock_acquire+0x1666/0x56c0 [ 774.729838][T29079] ___sys_recvmsg+0xd5/0x200 [ 774.734468][T29079] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 774.740146][T29079] ? find_held_lock+0x2d/0x110 [ 774.744947][T29079] ? __might_fault+0xd1/0x170 [ 774.749671][T29079] ? lock_downgrade+0x6e0/0x6e0 [ 774.754563][T29079] do_recvmmsg+0x24d/0x6d0 [ 774.759004][T29079] ? ___sys_recvmsg+0x200/0x200 [ 774.763869][T29079] ? find_held_lock+0x2d/0x110 [ 774.768654][T29079] ? __context_tracking_exit+0xb9/0xe0 [ 774.774125][T29079] ? lock_downgrade+0x6e0/0x6e0 [ 774.778991][T29079] __x64_sys_recvmmsg+0x20b/0x260 [ 774.784027][T29079] ? __do_sys_socketcall+0x590/0x590 [ 774.789327][T29079] ? syscall_enter_from_user_mode+0x21/0x70 [ 774.795240][T29079] do_syscall_64+0x35/0xb0 [ 774.799663][T29079] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 774.805567][T29079] RIP: 0033:0x7f067a2a6049 [ 774.809988][T29079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 774.829613][T29079] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 774.838065][T29079] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 774.846042][T29079] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 774.854018][T29079] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 774.862002][T29079] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 774.870006][T29079] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 774.878041][T29079] [ 774.882040][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ec32c00: rx timeout, send abort [ 774.890602][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d8d9400: rx timeout, send abort [ 774.899158][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801ec32c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:06 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x1100000000000000) [ 774.913634][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d8d9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x48, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 31) [ 775.077913][T29093] FAULT_INJECTION: forcing a failure. [ 775.077913][T29093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.091911][T29093] CPU: 0 PID: 29093 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 775.102445][T29093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.112521][T29093] Call Trace: [ 775.115816][T29093] [ 775.118761][T29093] dump_stack_lvl+0xcd/0x134 [ 775.123388][T29093] should_fail.cold+0x5/0xa [ 775.127931][T29093] _copy_from_user+0x2c/0x180 [ 775.132631][T29093] __copy_msghdr_from_user+0x91/0x4b0 [ 775.138037][T29093] ? __ia32_sys_shutdown+0x70/0x70 [ 775.143176][T29093] ? __lock_acquire+0x1666/0x56c0 [ 775.148249][T29093] ___sys_recvmsg+0xd5/0x200 [ 775.152974][T29093] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 775.158612][T29093] ? find_held_lock+0x2d/0x110 [ 775.163388][T29093] ? __might_fault+0xd1/0x170 [ 775.168097][T29093] ? lock_downgrade+0x6e0/0x6e0 [ 775.172992][T29093] do_recvmmsg+0x24d/0x6d0 [ 775.177429][T29093] ? ___sys_recvmsg+0x200/0x200 [ 775.182282][T29093] ? find_held_lock+0x2d/0x110 [ 775.187060][T29093] ? __context_tracking_exit+0xb9/0xe0 [ 775.192548][T29093] ? lock_downgrade+0x6e0/0x6e0 [ 775.197399][T29093] __x64_sys_recvmmsg+0x20b/0x260 [ 775.202425][T29093] ? __do_sys_socketcall+0x590/0x590 [ 775.207717][T29093] ? syscall_enter_from_user_mode+0x21/0x70 [ 775.213649][T29093] do_syscall_64+0x35/0xb0 [ 775.218083][T29093] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 775.223984][T29093] RIP: 0033:0x7f067a2a6049 [ 775.228420][T29093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 775.248151][T29093] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 775.256584][T29093] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 775.264582][T29093] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:40:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 32) [ 775.272561][T29093] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 775.280612][T29093] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 775.288576][T29093] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 775.296569][T29093] 12:40:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 775.352498][T29096] FAULT_INJECTION: forcing a failure. [ 775.352498][T29096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.373482][T29096] CPU: 1 PID: 29096 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 775.384224][T29096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.394311][T29096] Call Trace: [ 775.397600][T29096] [ 775.400543][T29096] dump_stack_lvl+0xcd/0x134 [ 775.405245][T29096] should_fail.cold+0x5/0xa [ 775.409780][T29096] _copy_from_user+0x2c/0x180 [ 775.414474][T29096] __copy_msghdr_from_user+0x91/0x4b0 [ 775.419859][T29096] ? __ia32_sys_shutdown+0x70/0x70 [ 775.424978][T29096] ? __lock_acquire+0x1666/0x56c0 [ 775.430028][T29096] ___sys_recvmsg+0xd5/0x200 [ 775.434632][T29096] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 775.440282][T29096] ? find_held_lock+0x2d/0x110 [ 775.445055][T29096] ? __might_fault+0xd1/0x170 [ 775.449740][T29096] ? lock_downgrade+0x6e0/0x6e0 [ 775.454694][T29096] do_recvmmsg+0x24d/0x6d0 [ 775.459129][T29096] ? ___sys_recvmsg+0x200/0x200 [ 775.463995][T29096] ? find_held_lock+0x2d/0x110 [ 775.468767][T29096] ? __context_tracking_exit+0xb9/0xe0 [ 775.474498][T29096] ? lock_downgrade+0x6e0/0x6e0 [ 775.479359][T29096] __x64_sys_recvmmsg+0x20b/0x260 [ 775.484391][T29096] ? __do_sys_socketcall+0x590/0x590 [ 775.489684][T29096] ? syscall_enter_from_user_mode+0x21/0x70 [ 775.495618][T29096] do_syscall_64+0x35/0xb0 [ 775.500039][T29096] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 775.505940][T29096] RIP: 0033:0x7f067a2a6049 [ 775.510354][T29096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 775.530062][T29096] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 775.538505][T29096] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 12:40:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xf0ffffff, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 33) [ 775.546478][T29096] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 775.554450][T29096] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 775.562418][T29096] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 775.570387][T29096] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 775.578386][T29096] [ 775.685057][T29106] FAULT_INJECTION: forcing a failure. [ 775.685057][T29106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.741422][T29106] CPU: 1 PID: 29106 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 775.751983][T29106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.762064][T29106] Call Trace: [ 775.765365][T29106] [ 775.768314][T29106] dump_stack_lvl+0xcd/0x134 [ 775.772945][T29106] should_fail.cold+0x5/0xa [ 775.777484][T29106] _copy_from_user+0x2c/0x180 [ 775.782191][T29106] __copy_msghdr_from_user+0x91/0x4b0 [ 775.787646][T29106] ? __ia32_sys_shutdown+0x70/0x70 [ 775.792763][T29106] ? __lock_acquire+0x1666/0x56c0 [ 775.797809][T29106] ___sys_recvmsg+0xd5/0x200 [ 775.802411][T29106] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 775.808045][T29106] ? find_held_lock+0x2d/0x110 [ 775.812811][T29106] ? __might_fault+0xd1/0x170 [ 775.817491][T29106] ? lock_downgrade+0x6e0/0x6e0 [ 775.822347][T29106] do_recvmmsg+0x24d/0x6d0 [ 775.826765][T29106] ? ___sys_recvmsg+0x200/0x200 [ 775.831626][T29106] ? find_held_lock+0x2d/0x110 [ 775.836393][T29106] ? __context_tracking_exit+0xb9/0xe0 [ 775.841859][T29106] ? lock_downgrade+0x6e0/0x6e0 [ 775.846715][T29106] __x64_sys_recvmmsg+0x20b/0x260 [ 775.851760][T29106] ? __do_sys_socketcall+0x590/0x590 [ 775.857051][T29106] ? syscall_enter_from_user_mode+0x21/0x70 [ 775.862950][T29106] do_syscall_64+0x35/0xb0 [ 775.867605][T29106] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 775.873506][T29106] RIP: 0033:0x7f067a2a6049 [ 775.877917][T29106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 775.897601][T29106] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 775.906006][T29106] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 775.913983][T29106] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 775.922030][T29106] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 775.929993][T29106] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:40:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 34) [ 775.938064][T29106] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 775.946060][T29106] 12:40:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4c, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x8000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 776.057910][T29114] FAULT_INJECTION: forcing a failure. [ 776.057910][T29114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.084978][T29099] __nla_validate_parse: 47 callbacks suppressed [ 776.084998][T29099] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 776.096455][T29116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 776.126915][T29114] CPU: 0 PID: 29114 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 776.137466][T29114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.144706][T29104] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 776.147634][T29114] Call Trace: [ 776.147646][T29114] [ 776.147657][T29114] dump_stack_lvl+0xcd/0x134 [ 776.158826][T29119] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 776.160264][T29114] should_fail.cold+0x5/0xa [ 776.181618][T29114] _copy_from_user+0x2c/0x180 [ 776.186324][T29114] __copy_msghdr_from_user+0x91/0x4b0 [ 776.191701][T29114] ? __ia32_sys_shutdown+0x70/0x70 [ 776.196832][T29114] ? __lock_acquire+0x1666/0x56c0 [ 776.201865][T29114] ___sys_recvmsg+0xd5/0x200 [ 776.206478][T29114] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 776.212159][T29114] ? find_held_lock+0x2d/0x110 [ 776.217079][T29114] ? __might_fault+0xd1/0x170 [ 776.221776][T29114] ? lock_downgrade+0x6e0/0x6e0 [ 776.226644][T29114] do_recvmmsg+0x24d/0x6d0 [ 776.231107][T29114] ? ___sys_recvmsg+0x200/0x200 [ 776.235970][T29114] ? find_held_lock+0x2d/0x110 [ 776.240734][T29114] ? __context_tracking_exit+0xb9/0xe0 [ 776.246191][T29114] ? lock_downgrade+0x6e0/0x6e0 [ 776.251046][T29114] __x64_sys_recvmmsg+0x20b/0x260 [ 776.256102][T29114] ? __do_sys_socketcall+0x590/0x590 [ 776.261408][T29114] ? syscall_enter_from_user_mode+0x21/0x70 [ 776.267300][T29114] do_syscall_64+0x35/0xb0 [ 776.271733][T29114] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 776.277630][T29114] RIP: 0033:0x7f067a2a6049 [ 776.282070][T29114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 776.301715][T29114] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 776.310239][T29114] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 776.318234][T29114] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 776.326316][T29114] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 776.334308][T29114] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 776.342298][T29114] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 776.350306][T29114] 12:40:07 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x92847a4c67000000) 12:40:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x5, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 776.354412][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b8b4400: rx timeout, send abort [ 776.362928][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880196bc800: rx timeout, send abort [ 776.371428][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b8b4400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 776.385896][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880196bc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 35) 12:40:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xf5ffffff, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 776.477436][T29125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 776.507042][T29116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 776.543591][T29128] FAULT_INJECTION: forcing a failure. [ 776.543591][T29128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.558958][T29130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 776.573853][T29119] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 776.592189][T29128] CPU: 1 PID: 29128 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 776.592641][T29125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 776.602744][T29128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.602766][T29128] Call Trace: [ 776.602775][T29128] [ 776.602786][T29128] dump_stack_lvl+0xcd/0x134 [ 776.602824][T29128] should_fail.cold+0x5/0xa [ 776.602860][T29128] _copy_from_user+0x2c/0x180 [ 776.602892][T29128] __copy_msghdr_from_user+0x91/0x4b0 [ 776.602926][T29128] ? __ia32_sys_shutdown+0x70/0x70 [ 776.602953][T29128] ? __lock_acquire+0x1666/0x56c0 [ 776.603000][T29128] ___sys_recvmsg+0xd5/0x200 [ 776.603027][T29128] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 776.603063][T29128] ? find_held_lock+0x2d/0x110 [ 776.660438][T29116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 776.664166][T29128] ? __might_fault+0xd1/0x170 [ 776.664205][T29128] ? lock_downgrade+0x6e0/0x6e0 [ 776.693349][T29128] do_recvmmsg+0x24d/0x6d0 [ 776.697767][T29128] ? ___sys_recvmsg+0x200/0x200 [ 776.702638][T29128] ? find_held_lock+0x2d/0x110 [ 776.707461][T29128] ? __context_tracking_exit+0xb9/0xe0 [ 776.712948][T29128] ? lock_downgrade+0x6e0/0x6e0 [ 776.717836][T29128] __x64_sys_recvmmsg+0x20b/0x260 [ 776.722864][T29128] ? __do_sys_socketcall+0x590/0x590 [ 776.728143][T29128] ? syscall_enter_from_user_mode+0x21/0x70 [ 776.734036][T29128] do_syscall_64+0x35/0xb0 [ 776.738446][T29128] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 776.744363][T29128] RIP: 0033:0x7f067a2a6049 [ 776.748794][T29128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 776.768413][T29128] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 776.776928][T29128] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 776.784890][T29128] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 776.792853][T29128] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 776.800812][T29128] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 776.808780][T29128] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 776.816848][T29128] 12:40:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 36) 12:40:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x60, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x9000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 776.980801][T29138] FAULT_INJECTION: forcing a failure. [ 776.980801][T29138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.023336][T29138] CPU: 0 PID: 29138 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 777.033893][T29138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.043974][T29138] Call Trace: [ 777.047266][T29138] [ 777.050206][T29138] dump_stack_lvl+0xcd/0x134 [ 777.054821][T29138] should_fail.cold+0x5/0xa [ 777.059352][T29138] _copy_from_user+0x2c/0x180 [ 777.064041][T29138] __copy_msghdr_from_user+0x91/0x4b0 [ 777.069600][T29138] ? __ia32_sys_shutdown+0x70/0x70 [ 777.074726][T29138] ? __lock_acquire+0x1666/0x56c0 [ 777.079775][T29138] ___sys_recvmsg+0xd5/0x200 [ 777.084379][T29138] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 777.090029][T29138] ? find_held_lock+0x2d/0x110 [ 777.094803][T29138] ? __might_fault+0xd1/0x170 [ 777.099487][T29138] ? lock_downgrade+0x6e0/0x6e0 [ 777.104358][T29138] do_recvmmsg+0x24d/0x6d0 [ 777.108784][T29138] ? ___sys_recvmsg+0x200/0x200 [ 777.113653][T29138] ? find_held_lock+0x2d/0x110 [ 777.118445][T29138] ? __context_tracking_exit+0xb9/0xe0 [ 777.123915][T29138] ? lock_downgrade+0x6e0/0x6e0 [ 777.128781][T29138] __x64_sys_recvmmsg+0x20b/0x260 [ 777.133834][T29138] ? __do_sys_socketcall+0x590/0x590 [ 777.139129][T29138] ? syscall_enter_from_user_mode+0x21/0x70 [ 777.145037][T29138] do_syscall_64+0x35/0xb0 [ 777.149458][T29138] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 777.155375][T29138] RIP: 0033:0x7f067a2a6049 [ 777.159809][T29138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 777.179420][T29138] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 777.187844][T29138] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 777.195827][T29138] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 777.203798][T29138] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 777.211770][T29138] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:40:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 777.219838][T29138] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 777.227845][T29138] 12:40:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 37) 12:40:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xfeffffff, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x68, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 777.438464][T29154] FAULT_INJECTION: forcing a failure. [ 777.438464][T29154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.493996][T29154] CPU: 0 PID: 29154 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 777.504553][T29154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.514634][T29154] Call Trace: [ 777.517927][T29154] [ 777.520867][T29154] dump_stack_lvl+0xcd/0x134 [ 777.525483][T29154] should_fail.cold+0x5/0xa [ 777.530028][T29154] _copy_from_user+0x2c/0x180 [ 777.534740][T29154] __copy_msghdr_from_user+0x91/0x4b0 [ 777.540147][T29154] ? __ia32_sys_shutdown+0x70/0x70 [ 777.545282][T29154] ? __lock_acquire+0x1666/0x56c0 [ 777.550355][T29154] ___sys_recvmsg+0xd5/0x200 [ 777.554974][T29154] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 777.560645][T29154] ? find_held_lock+0x2d/0x110 [ 777.565423][T29154] ? __might_fault+0xd1/0x170 [ 777.570130][T29154] ? lock_downgrade+0x6e0/0x6e0 [ 777.575004][T29154] do_recvmmsg+0x24d/0x6d0 [ 777.579432][T29154] ? ___sys_recvmsg+0x200/0x200 [ 777.584297][T29154] ? find_held_lock+0x2d/0x110 [ 777.589076][T29154] ? __context_tracking_exit+0xb9/0xe0 [ 777.594552][T29154] ? lock_downgrade+0x6e0/0x6e0 [ 777.599426][T29154] __x64_sys_recvmmsg+0x20b/0x260 [ 777.604464][T29154] ? __do_sys_socketcall+0x590/0x590 [ 777.609764][T29154] ? syscall_enter_from_user_mode+0x21/0x70 [ 777.615677][T29154] do_syscall_64+0x35/0xb0 [ 777.620099][T29154] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 777.626002][T29154] RIP: 0033:0x7f067a2a6049 [ 777.630419][T29154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 777.650035][T29154] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 777.658460][T29154] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 777.666436][T29154] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 777.674411][T29154] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 777.682384][T29154] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 777.690357][T29154] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 777.698346][T29154] [ 777.702633][ C0] vcan0: j1939_tp_rxtimer: 0xffff888072a2a400: rx timeout, send abort [ 777.710935][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801c802000: rx timeout, send abort [ 777.719689][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888072a2a400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:08 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xfeffffff00000000) 12:40:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 38) [ 777.734245][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801c802000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xa000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 777.877085][T29168] FAULT_INJECTION: forcing a failure. [ 777.877085][T29168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.901540][T29168] CPU: 1 PID: 29168 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 777.912094][T29168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.922170][T29168] Call Trace: [ 777.925466][T29168] [ 777.928416][T29168] dump_stack_lvl+0xcd/0x134 [ 777.933032][T29168] should_fail.cold+0x5/0xa [ 777.937580][T29168] _copy_from_user+0x2c/0x180 [ 777.942285][T29168] __copy_msghdr_from_user+0x91/0x4b0 [ 777.947686][T29168] ? __ia32_sys_shutdown+0x70/0x70 [ 777.952817][T29168] ? __lock_acquire+0x1666/0x56c0 [ 777.957874][T29168] ___sys_recvmsg+0xd5/0x200 [ 777.962476][T29168] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 777.968122][T29168] ? find_held_lock+0x2d/0x110 [ 777.972898][T29168] ? __might_fault+0xd1/0x170 [ 777.977586][T29168] ? lock_downgrade+0x6e0/0x6e0 [ 777.982458][T29168] do_recvmmsg+0x24d/0x6d0 [ 777.986883][T29168] ? ___sys_recvmsg+0x200/0x200 [ 777.991765][T29168] ? find_held_lock+0x2d/0x110 [ 777.996541][T29168] ? __context_tracking_exit+0xb9/0xe0 [ 778.002016][T29168] ? lock_downgrade+0x6e0/0x6e0 [ 778.006895][T29168] __x64_sys_recvmmsg+0x20b/0x260 [ 778.011930][T29168] ? __do_sys_socketcall+0x590/0x590 [ 778.017224][T29168] ? syscall_enter_from_user_mode+0x21/0x70 [ 778.023134][T29168] do_syscall_64+0x35/0xb0 [ 778.027559][T29168] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 778.033550][T29168] RIP: 0033:0x7f067a2a6049 [ 778.037987][T29168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 778.057604][T29168] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 778.066048][T29168] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 12:40:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 39) [ 778.074020][T29168] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 778.081994][T29168] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 778.089983][T29168] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 778.097971][T29168] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 778.105960][T29168] 12:40:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xfffff000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 778.196557][T29176] FAULT_INJECTION: forcing a failure. [ 778.196557][T29176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.217239][T29176] CPU: 0 PID: 29176 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 778.227797][T29176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.238241][T29176] Call Trace: [ 778.241532][T29176] [ 778.244461][T29176] dump_stack_lvl+0xcd/0x134 [ 778.249068][T29176] should_fail.cold+0x5/0xa [ 778.253586][T29176] _copy_from_user+0x2c/0x180 [ 778.258276][T29176] __copy_msghdr_from_user+0x91/0x4b0 [ 778.263658][T29176] ? __ia32_sys_shutdown+0x70/0x70 [ 778.268775][T29176] ? __lock_acquire+0x1666/0x56c0 [ 778.273823][T29176] ___sys_recvmsg+0xd5/0x200 [ 778.278852][T29176] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 778.284503][T29176] ? find_held_lock+0x2d/0x110 [ 778.289382][T29176] ? __might_fault+0xd1/0x170 [ 778.294068][T29176] ? lock_downgrade+0x6e0/0x6e0 [ 778.298945][T29176] do_recvmmsg+0x24d/0x6d0 [ 778.303370][T29176] ? ___sys_recvmsg+0x200/0x200 [ 778.308235][T29176] ? find_held_lock+0x2d/0x110 [ 778.313016][T29176] ? __context_tracking_exit+0xb9/0xe0 [ 778.318508][T29176] ? lock_downgrade+0x6e0/0x6e0 [ 778.323373][T29176] __x64_sys_recvmmsg+0x20b/0x260 [ 778.328420][T29176] ? __do_sys_socketcall+0x590/0x590 [ 778.333715][T29176] ? syscall_enter_from_user_mode+0x21/0x70 [ 778.340057][T29176] do_syscall_64+0x35/0xb0 [ 778.344478][T29176] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 778.350380][T29176] RIP: 0033:0x7f067a2a6049 [ 778.354796][T29176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 778.374540][T29176] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 778.382983][T29176] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 12:40:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 40) [ 778.390957][T29176] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 778.398929][T29176] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 778.406900][T29176] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 778.414871][T29176] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 778.422929][T29176] 12:40:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6c, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 778.514388][T29183] FAULT_INJECTION: forcing a failure. [ 778.514388][T29183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.551808][T29183] CPU: 1 PID: 29183 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 778.562449][T29183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.572551][T29183] Call Trace: [ 778.575849][T29183] [ 778.578795][T29183] dump_stack_lvl+0xcd/0x134 [ 778.583420][T29183] should_fail.cold+0x5/0xa [ 778.588063][T29183] _copy_from_user+0x2c/0x180 [ 778.592770][T29183] __copy_msghdr_from_user+0x91/0x4b0 [ 778.598171][T29183] ? __ia32_sys_shutdown+0x70/0x70 [ 778.603306][T29183] ? __lock_acquire+0x1666/0x56c0 [ 778.608376][T29183] ___sys_recvmsg+0xd5/0x200 [ 778.613103][T29183] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 778.618774][T29183] ? find_held_lock+0x2d/0x110 [ 778.623578][T29183] ? __might_fault+0xd1/0x170 [ 778.628268][T29183] ? lock_downgrade+0x6e0/0x6e0 [ 778.633127][T29183] do_recvmmsg+0x24d/0x6d0 [ 778.637547][T29183] ? ___sys_recvmsg+0x200/0x200 [ 778.642401][T29183] ? find_held_lock+0x2d/0x110 [ 778.647171][T29183] ? __context_tracking_exit+0xb9/0xe0 [ 778.652642][T29183] ? lock_downgrade+0x6e0/0x6e0 [ 778.657516][T29183] __x64_sys_recvmmsg+0x20b/0x260 [ 778.662583][T29183] ? __do_sys_socketcall+0x590/0x590 [ 778.667965][T29183] ? syscall_enter_from_user_mode+0x21/0x70 [ 778.673867][T29183] do_syscall_64+0x35/0xb0 [ 778.678284][T29183] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 778.684180][T29183] RIP: 0033:0x7f067a2a6049 [ 778.688598][T29183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:40:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 41) [ 778.708199][T29183] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 778.716617][T29183] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 778.724620][T29183] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 778.732620][T29183] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 778.740592][T29183] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 778.748561][T29183] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 778.756542][T29183] 12:40:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xb000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 778.825095][T29192] FAULT_INJECTION: forcing a failure. [ 778.825095][T29192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.866129][T29192] CPU: 0 PID: 29192 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 778.876680][T29192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.886752][T29192] Call Trace: [ 778.890047][T29192] [ 778.892999][T29192] dump_stack_lvl+0xcd/0x134 [ 778.897620][T29192] should_fail.cold+0x5/0xa [ 778.902165][T29192] _copy_from_user+0x2c/0x180 [ 778.906877][T29192] __copy_msghdr_from_user+0x91/0x4b0 [ 778.912278][T29192] ? __ia32_sys_shutdown+0x70/0x70 [ 778.917416][T29192] ? __lock_acquire+0x1666/0x56c0 [ 778.922488][T29192] ___sys_recvmsg+0xd5/0x200 [ 778.927105][T29192] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 778.932773][T29192] ? find_held_lock+0x2d/0x110 [ 778.937588][T29192] ? __might_fault+0xd1/0x170 [ 778.942286][T29192] ? lock_downgrade+0x6e0/0x6e0 [ 778.947154][T29192] do_recvmmsg+0x24d/0x6d0 [ 778.951602][T29192] ? ___sys_recvmsg+0x200/0x200 [ 778.956597][T29192] ? find_held_lock+0x2d/0x110 [ 778.961416][T29192] ? __context_tracking_exit+0xb9/0xe0 [ 778.966896][T29192] ? lock_downgrade+0x6e0/0x6e0 [ 778.971776][T29192] __x64_sys_recvmmsg+0x20b/0x260 [ 778.976833][T29192] ? __do_sys_socketcall+0x590/0x590 [ 778.982147][T29192] ? syscall_enter_from_user_mode+0x21/0x70 [ 778.988053][T29192] do_syscall_64+0x35/0xb0 [ 778.992489][T29192] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 778.998493][T29192] RIP: 0033:0x7f067a2a6049 [ 779.002933][T29192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 779.022551][T29192] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 779.030995][T29192] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 779.039441][T29192] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 779.047450][T29192] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 779.055539][T29192] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:40:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 42) [ 779.063518][T29192] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 779.068788][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021f2ac00: rx timeout, send abort [ 779.071629][T29192] [ 779.085772][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888021f2ac00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 779.100285][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021f29800: rx timeout, send abort 12:40:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xffffff7f, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xffef000000000000) [ 779.109740][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888021f29800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 779.183699][T29201] FAULT_INJECTION: forcing a failure. [ 779.183699][T29201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.247135][T29201] CPU: 0 PID: 29201 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 779.257685][T29201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.267782][T29201] Call Trace: [ 779.271077][T29201] [ 779.274023][T29201] dump_stack_lvl+0xcd/0x134 [ 779.278727][T29201] should_fail.cold+0x5/0xa [ 779.283260][T29201] _copy_from_user+0x2c/0x180 [ 779.287975][T29201] __copy_msghdr_from_user+0x91/0x4b0 [ 779.293379][T29201] ? __ia32_sys_shutdown+0x70/0x70 [ 779.298512][T29201] ? __lock_acquire+0x1666/0x56c0 [ 779.303751][T29201] ___sys_recvmsg+0xd5/0x200 [ 779.308363][T29201] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 779.314031][T29201] ? find_held_lock+0x2d/0x110 [ 779.318947][T29201] ? __might_fault+0xd1/0x170 [ 779.323651][T29201] ? lock_downgrade+0x6e0/0x6e0 [ 779.328540][T29201] do_recvmmsg+0x24d/0x6d0 [ 779.332980][T29201] ? ___sys_recvmsg+0x200/0x200 [ 779.337865][T29201] ? find_held_lock+0x2d/0x110 [ 779.342666][T29201] ? __context_tracking_exit+0xb9/0xe0 [ 779.348253][T29201] ? lock_downgrade+0x6e0/0x6e0 [ 779.353303][T29201] __x64_sys_recvmmsg+0x20b/0x260 [ 779.358365][T29201] ? __do_sys_socketcall+0x590/0x590 [ 779.363668][T29201] ? syscall_enter_from_user_mode+0x21/0x70 [ 779.369584][T29201] do_syscall_64+0x35/0xb0 [ 779.374009][T29201] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 779.379913][T29201] RIP: 0033:0x7f067a2a6049 [ 779.384331][T29201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 779.403959][T29201] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 779.412381][T29201] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 779.420409][T29201] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 779.428399][T29201] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 779.436376][T29201] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:40:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x8, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 779.444364][T29201] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 779.452353][T29201] 12:40:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 43) 12:40:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x74, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 779.603140][T29213] FAULT_INJECTION: forcing a failure. [ 779.603140][T29213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.649024][T29213] CPU: 0 PID: 29213 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 779.659666][T29213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.669744][T29213] Call Trace: [ 779.673041][T29213] [ 779.675986][T29213] dump_stack_lvl+0xcd/0x134 [ 779.680610][T29213] should_fail.cold+0x5/0xa [ 779.685149][T29213] _copy_from_user+0x2c/0x180 [ 779.689883][T29213] __copy_msghdr_from_user+0x91/0x4b0 [ 779.695307][T29213] ? __ia32_sys_shutdown+0x70/0x70 [ 779.700457][T29213] ? __lock_acquire+0x1666/0x56c0 [ 779.705508][T29213] ___sys_recvmsg+0xd5/0x200 [ 779.710210][T29213] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 779.715876][T29213] ? find_held_lock+0x2d/0x110 [ 779.720670][T29213] ? __might_fault+0xd1/0x170 [ 779.725374][T29213] ? lock_downgrade+0x6e0/0x6e0 [ 779.730257][T29213] do_recvmmsg+0x24d/0x6d0 [ 779.734703][T29213] ? ___sys_recvmsg+0x200/0x200 [ 779.739577][T29213] ? find_held_lock+0x2d/0x110 [ 779.744377][T29213] ? __context_tracking_exit+0xb9/0xe0 [ 779.749853][T29213] ? lock_downgrade+0x6e0/0x6e0 [ 779.754764][T29213] __x64_sys_recvmmsg+0x20b/0x260 [ 779.759846][T29213] ? __do_sys_socketcall+0x590/0x590 [ 779.765191][T29213] ? syscall_enter_from_user_mode+0x21/0x70 [ 779.771111][T29213] do_syscall_64+0x35/0xb0 [ 779.775551][T29213] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 779.781456][T29213] RIP: 0033:0x7f067a2a6049 [ 779.785877][T29213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 779.805503][T29213] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 779.813921][T29213] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 779.821911][T29213] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 779.829888][T29213] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 779.837859][T29213] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:40:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 44) [ 779.845844][T29213] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 779.853832][T29213] 12:40:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xc000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 779.922131][T29222] FAULT_INJECTION: forcing a failure. [ 779.922131][T29222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.937140][T29222] CPU: 1 PID: 29222 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 779.947683][T29222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.957755][T29222] Call Trace: [ 779.961046][T29222] [ 779.964111][T29222] dump_stack_lvl+0xcd/0x134 [ 779.968735][T29222] should_fail.cold+0x5/0xa [ 779.973275][T29222] _copy_from_user+0x2c/0x180 [ 779.977972][T29222] __copy_msghdr_from_user+0x91/0x4b0 [ 779.983365][T29222] ? __ia32_sys_shutdown+0x70/0x70 [ 779.988503][T29222] ? __lock_acquire+0x1666/0x56c0 [ 779.994246][T29222] ___sys_recvmsg+0xd5/0x200 [ 779.998846][T29222] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 780.004497][T29222] ? find_held_lock+0x2d/0x110 [ 780.009319][T29222] ? __might_fault+0xd1/0x170 [ 780.014007][T29222] ? lock_downgrade+0x6e0/0x6e0 [ 780.018901][T29222] do_recvmmsg+0x24d/0x6d0 [ 780.023337][T29222] ? ___sys_recvmsg+0x200/0x200 [ 780.028212][T29222] ? find_held_lock+0x2d/0x110 [ 780.033002][T29222] ? __context_tracking_exit+0xb9/0xe0 [ 780.038486][T29222] ? lock_downgrade+0x6e0/0x6e0 [ 780.043353][T29222] __x64_sys_recvmmsg+0x20b/0x260 [ 780.048480][T29222] ? __do_sys_socketcall+0x590/0x590 [ 780.053777][T29222] ? syscall_enter_from_user_mode+0x21/0x70 [ 780.059685][T29222] do_syscall_64+0x35/0xb0 [ 780.064210][T29222] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 780.070117][T29222] RIP: 0033:0x7f067a2a6049 [ 780.074535][T29222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 780.094234][T29222] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 780.102762][T29222] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 780.110736][T29222] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:40:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xffffff9e, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 45) [ 780.118705][T29222] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 780.126676][T29222] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 780.134650][T29222] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 780.142643][T29222] [ 780.246212][T29231] FAULT_INJECTION: forcing a failure. [ 780.246212][T29231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.279733][T29231] CPU: 0 PID: 29231 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 780.290287][T29231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.300394][T29231] Call Trace: [ 780.303688][T29231] [ 780.306639][T29231] dump_stack_lvl+0xcd/0x134 [ 780.311266][T29231] should_fail.cold+0x5/0xa [ 780.315808][T29231] _copy_from_user+0x2c/0x180 [ 780.320551][T29231] __copy_msghdr_from_user+0x91/0x4b0 [ 780.325950][T29231] ? __ia32_sys_shutdown+0x70/0x70 [ 780.331082][T29231] ? __lock_acquire+0x1666/0x56c0 [ 780.336149][T29231] ___sys_recvmsg+0xd5/0x200 [ 780.340762][T29231] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 780.346440][T29231] ? find_held_lock+0x2d/0x110 [ 780.351225][T29231] ? __might_fault+0xd1/0x170 [ 780.355917][T29231] ? lock_downgrade+0x6e0/0x6e0 [ 780.360810][T29231] do_recvmmsg+0x24d/0x6d0 [ 780.365236][T29231] ? ___sys_recvmsg+0x200/0x200 [ 780.370101][T29231] ? find_held_lock+0x2d/0x110 [ 780.374877][T29231] ? __context_tracking_exit+0xb9/0xe0 [ 780.380351][T29231] ? lock_downgrade+0x6e0/0x6e0 [ 780.385219][T29231] __x64_sys_recvmmsg+0x20b/0x260 [ 780.390255][T29231] ? __do_sys_socketcall+0x590/0x590 [ 780.395559][T29231] ? syscall_enter_from_user_mode+0x21/0x70 [ 780.401465][T29231] do_syscall_64+0x35/0xb0 [ 780.405902][T29231] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 780.411803][T29231] RIP: 0033:0x7f067a2a6049 [ 780.416219][T29231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 780.435936][T29231] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 780.444356][T29231] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 780.452337][T29231] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 780.460313][T29231] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 780.468285][T29231] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 780.476271][T29231] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 780.484269][T29231] [ 780.488562][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c915000: rx timeout, send abort 12:40:11 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xffff030000000000) 12:40:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7a, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 780.496875][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c916400: rx timeout, send abort [ 780.505503][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806c915000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 780.519970][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806c916400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x9, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 46) [ 780.730313][T29247] FAULT_INJECTION: forcing a failure. [ 780.730313][T29247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.744113][T29247] CPU: 0 PID: 29247 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 780.754672][T29247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.764753][T29247] Call Trace: [ 780.768046][T29247] [ 780.770989][T29247] dump_stack_lvl+0xcd/0x134 [ 780.775722][T29247] should_fail.cold+0x5/0xa [ 780.780302][T29247] _copy_from_user+0x2c/0x180 [ 780.785017][T29247] __copy_msghdr_from_user+0x91/0x4b0 [ 780.790420][T29247] ? __ia32_sys_shutdown+0x70/0x70 [ 780.795555][T29247] ? __lock_acquire+0x1666/0x56c0 [ 780.800621][T29247] ___sys_recvmsg+0xd5/0x200 [ 780.805216][T29247] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 780.810980][T29247] ? find_held_lock+0x2d/0x110 [ 780.815758][T29247] ? __might_fault+0xd1/0x170 [ 780.820472][T29247] ? lock_downgrade+0x6e0/0x6e0 [ 780.825545][T29247] do_recvmmsg+0x24d/0x6d0 [ 780.830045][T29247] ? ___sys_recvmsg+0x200/0x200 [ 780.835016][T29247] ? find_held_lock+0x2d/0x110 [ 780.839809][T29247] ? __context_tracking_exit+0xb9/0xe0 [ 780.845281][T29247] ? lock_downgrade+0x6e0/0x6e0 [ 780.850151][T29247] __x64_sys_recvmmsg+0x20b/0x260 [ 780.855182][T29247] ? __do_sys_socketcall+0x590/0x590 [ 780.860487][T29247] ? syscall_enter_from_user_mode+0x21/0x70 [ 780.866385][T29247] do_syscall_64+0x35/0xb0 [ 780.870813][T29247] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 780.876711][T29247] RIP: 0033:0x7f067a2a6049 [ 780.881144][T29247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 780.900758][T29247] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 780.909177][T29247] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 780.917265][T29247] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:40:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xe000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 780.925258][T29247] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 780.933244][T29247] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 780.941225][T29247] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 780.949214][T29247] 12:40:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 47) [ 781.016470][T29252] FAULT_INJECTION: forcing a failure. [ 781.016470][T29252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.044877][T29252] CPU: 1 PID: 29252 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 781.055436][T29252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 781.065518][T29252] Call Trace: [ 781.068814][T29252] [ 781.071763][T29252] dump_stack_lvl+0xcd/0x134 [ 781.076384][T29252] should_fail.cold+0x5/0xa [ 781.080929][T29252] _copy_from_user+0x2c/0x180 [ 781.085662][T29252] __copy_msghdr_from_user+0x91/0x4b0 [ 781.091062][T29252] ? __ia32_sys_shutdown+0x70/0x70 [ 781.096218][T29252] ? __lock_acquire+0x1666/0x56c0 [ 781.101291][T29252] ___sys_recvmsg+0xd5/0x200 [ 781.105915][T29252] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 781.111585][T29252] ? find_held_lock+0x2d/0x110 [ 781.116469][T29252] ? __might_fault+0xd1/0x170 [ 781.121173][T29252] ? lock_downgrade+0x6e0/0x6e0 [ 781.126064][T29252] do_recvmmsg+0x24d/0x6d0 [ 781.130516][T29252] ? ___sys_recvmsg+0x200/0x200 [ 781.135418][T29252] ? find_held_lock+0x2d/0x110 [ 781.140211][T29252] ? __context_tracking_exit+0xb9/0xe0 [ 781.145705][T29252] ? lock_downgrade+0x6e0/0x6e0 [ 781.150582][T29252] __x64_sys_recvmmsg+0x20b/0x260 [ 781.155630][T29252] ? __do_sys_socketcall+0x590/0x590 [ 781.161052][T29252] ? syscall_enter_from_user_mode+0x21/0x70 [ 781.166956][T29252] do_syscall_64+0x35/0xb0 [ 781.171396][T29252] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 781.177328][T29252] RIP: 0033:0x7f067a2a6049 [ 781.181758][T29252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 781.201390][T29252] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 781.209828][T29252] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 781.217805][T29252] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 781.225794][T29252] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 781.233763][T29252] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 781.241735][T29252] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 781.249720][T29252] [ 781.253585][T29250] __nla_validate_parse: 50 callbacks suppressed 12:40:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xfffffff0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 781.253602][T29250] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:40:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xa, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 48) [ 781.304392][T29259] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 781.321777][T29236] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 781.370999][T29264] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x94, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 781.423065][T29266] FAULT_INJECTION: forcing a failure. [ 781.423065][T29266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.446155][T29259] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 781.451138][T29266] CPU: 1 PID: 29266 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 781.466066][T29266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 781.476144][T29266] Call Trace: [ 781.479452][T29266] [ 781.482417][T29266] dump_stack_lvl+0xcd/0x134 [ 781.487025][T29266] should_fail.cold+0x5/0xa [ 781.491545][T29266] _copy_from_user+0x2c/0x180 [ 781.496318][T29266] __copy_msghdr_from_user+0x91/0x4b0 [ 781.501701][T29266] ? __ia32_sys_shutdown+0x70/0x70 [ 781.506816][T29266] ? __lock_acquire+0x1666/0x56c0 [ 781.511865][T29266] ___sys_recvmsg+0xd5/0x200 [ 781.516462][T29266] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 781.522111][T29266] ? find_held_lock+0x2d/0x110 [ 781.526903][T29266] ? __might_fault+0xd1/0x170 [ 781.531605][T29266] ? lock_downgrade+0x6e0/0x6e0 [ 781.536476][T29266] do_recvmmsg+0x24d/0x6d0 [ 781.540923][T29266] ? ___sys_recvmsg+0x200/0x200 [ 781.545790][T29266] ? find_held_lock+0x2d/0x110 [ 781.550586][T29266] ? __context_tracking_exit+0xb9/0xe0 [ 781.556065][T29266] ? lock_downgrade+0x6e0/0x6e0 [ 781.561020][T29266] __x64_sys_recvmmsg+0x20b/0x260 [ 781.566248][T29266] ? __do_sys_socketcall+0x590/0x590 [ 781.571552][T29266] ? syscall_enter_from_user_mode+0x21/0x70 [ 781.577461][T29266] do_syscall_64+0x35/0xb0 [ 781.581892][T29266] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 781.587796][T29266] RIP: 0033:0x7f067a2a6049 [ 781.592228][T29266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 781.611861][T29266] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 781.620286][T29266] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 781.628259][T29266] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 781.636241][T29266] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 781.644217][T29266] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 781.652211][T29266] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 781.660211][T29266] 12:40:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 49) [ 781.693201][T29250] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 781.703242][T29264] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x12000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 781.767223][T29274] FAULT_INJECTION: forcing a failure. [ 781.767223][T29274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.817730][T29274] CPU: 0 PID: 29274 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 781.828327][T29274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 781.838406][T29274] Call Trace: [ 781.841701][T29274] [ 781.844645][T29274] dump_stack_lvl+0xcd/0x134 [ 781.849145][T29259] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 781.849259][T29274] should_fail.cold+0x5/0xa [ 781.863144][T29274] _copy_from_user+0x2c/0x180 [ 781.867854][T29274] __copy_msghdr_from_user+0x91/0x4b0 [ 781.873255][T29274] ? __ia32_sys_shutdown+0x70/0x70 [ 781.878375][T29274] ? __lock_acquire+0x1666/0x56c0 [ 781.883422][T29274] ___sys_recvmsg+0xd5/0x200 [ 781.888037][T29274] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 781.893687][T29274] ? find_held_lock+0x2d/0x110 [ 781.898462][T29274] ? __might_fault+0xd1/0x170 [ 781.903240][T29274] ? lock_downgrade+0x6e0/0x6e0 [ 781.908112][T29274] do_recvmmsg+0x24d/0x6d0 [ 781.912542][T29274] ? ___sys_recvmsg+0x200/0x200 [ 781.917422][T29274] ? find_held_lock+0x2d/0x110 [ 781.922233][T29274] ? __context_tracking_exit+0xb9/0xe0 [ 781.927728][T29274] ? lock_downgrade+0x6e0/0x6e0 [ 781.932626][T29274] __x64_sys_recvmmsg+0x20b/0x260 [ 781.937670][T29274] ? __do_sys_socketcall+0x590/0x590 [ 781.942973][T29274] ? syscall_enter_from_user_mode+0x21/0x70 [ 781.948992][T29274] do_syscall_64+0x35/0xb0 [ 781.953409][T29274] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 781.959315][T29274] RIP: 0033:0x7f067a2a6049 [ 781.963737][T29274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 781.983354][T29274] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 781.991774][T29274] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 781.999837][T29274] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 782.007823][T29274] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 782.015795][T29274] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 782.023770][T29274] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 782.031766][T29274] [ 782.035936][ C0] vcan0: j1939_tp_rxtimer: 0xffff888072c33400: rx timeout, send abort [ 782.044326][ C0] vcan0: j1939_tp_rxtimer: 0xffff888072f08800: rx timeout, send abort [ 782.052855][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888072c33400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:13 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xffffff7f00000000) [ 782.067529][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888072f08800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 782.087391][T29277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 782.098825][T29269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:40:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xfffffff5, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 50) 12:40:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xb, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 782.240179][T29286] FAULT_INJECTION: forcing a failure. [ 782.240179][T29286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.291984][T29286] CPU: 1 PID: 29286 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 782.302552][T29286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.312635][T29286] Call Trace: [ 782.315928][T29286] [ 782.318870][T29286] dump_stack_lvl+0xcd/0x134 [ 782.323577][T29286] should_fail.cold+0x5/0xa [ 782.328195][T29286] _copy_from_user+0x2c/0x180 [ 782.332872][T29286] __copy_msghdr_from_user+0x91/0x4b0 [ 782.338253][T29286] ? __ia32_sys_shutdown+0x70/0x70 [ 782.343377][T29286] ? __lock_acquire+0x1666/0x56c0 [ 782.348429][T29286] ___sys_recvmsg+0xd5/0x200 [ 782.353042][T29286] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 782.358692][T29286] ? find_held_lock+0x2d/0x110 [ 782.363478][T29286] ? __might_fault+0xd1/0x170 [ 782.368274][T29286] ? lock_downgrade+0x6e0/0x6e0 [ 782.373260][T29286] do_recvmmsg+0x24d/0x6d0 [ 782.377687][T29286] ? ___sys_recvmsg+0x200/0x200 [ 782.382555][T29286] ? find_held_lock+0x2d/0x110 [ 782.387344][T29286] ? __context_tracking_exit+0xb9/0xe0 [ 782.392850][T29286] ? lock_downgrade+0x6e0/0x6e0 [ 782.397718][T29286] __x64_sys_recvmmsg+0x20b/0x260 [ 782.402933][T29286] ? __do_sys_socketcall+0x590/0x590 [ 782.408248][T29286] ? syscall_enter_from_user_mode+0x21/0x70 [ 782.414160][T29286] do_syscall_64+0x35/0xb0 [ 782.418575][T29286] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 782.424465][T29286] RIP: 0033:0x7f067a2a6049 [ 782.428872][T29286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 782.448473][T29286] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 782.456899][T29286] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 782.464874][T29286] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 782.472842][T29286] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 782.480810][T29286] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:40:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 51) [ 782.488775][T29286] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 782.496752][T29286] 12:40:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xf0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 782.586309][T29295] FAULT_INJECTION: forcing a failure. [ 782.586309][T29295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.648211][T29295] CPU: 1 PID: 29295 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 782.658773][T29295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.668854][T29295] Call Trace: [ 782.672145][T29295] [ 782.675072][T29295] dump_stack_lvl+0xcd/0x134 [ 782.679674][T29295] should_fail.cold+0x5/0xa [ 782.684198][T29295] _copy_from_user+0x2c/0x180 [ 782.688887][T29295] __copy_msghdr_from_user+0x91/0x4b0 [ 782.694270][T29295] ? __ia32_sys_shutdown+0x70/0x70 [ 782.699390][T29295] ? __lock_acquire+0x1666/0x56c0 [ 782.704443][T29295] ___sys_recvmsg+0xd5/0x200 [ 782.709045][T29295] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 782.714701][T29295] ? find_held_lock+0x2d/0x110 [ 782.719497][T29295] ? __might_fault+0xd1/0x170 [ 782.724184][T29295] ? lock_downgrade+0x6e0/0x6e0 [ 782.729063][T29295] do_recvmmsg+0x24d/0x6d0 [ 782.733493][T29295] ? ___sys_recvmsg+0x200/0x200 [ 782.738362][T29295] ? find_held_lock+0x2d/0x110 [ 782.743137][T29295] ? __context_tracking_exit+0xb9/0xe0 [ 782.748630][T29295] ? lock_downgrade+0x6e0/0x6e0 [ 782.753534][T29295] __x64_sys_recvmmsg+0x20b/0x260 [ 782.758589][T29295] ? __do_sys_socketcall+0x590/0x590 [ 782.763890][T29295] ? syscall_enter_from_user_mode+0x21/0x70 [ 782.769814][T29295] do_syscall_64+0x35/0xb0 [ 782.774256][T29295] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 782.780167][T29295] RIP: 0033:0x7f067a2a6049 [ 782.784584][T29295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 782.804210][T29295] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 782.812633][T29295] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 782.820608][T29295] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 782.828581][T29295] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 782.836553][T29295] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 782.844523][T29295] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 782.852510][T29295] 12:40:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 52) [ 782.956317][T29302] FAULT_INJECTION: forcing a failure. [ 782.956317][T29302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.970700][T29302] CPU: 0 PID: 29302 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 782.981245][T29302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.991309][T29302] Call Trace: [ 782.994614][T29302] [ 782.997558][T29302] dump_stack_lvl+0xcd/0x134 [ 783.002159][T29302] should_fail.cold+0x5/0xa [ 783.006683][T29302] _copy_from_user+0x2c/0x180 [ 783.011390][T29302] __copy_msghdr_from_user+0x91/0x4b0 [ 783.016789][T29302] ? __ia32_sys_shutdown+0x70/0x70 [ 783.021923][T29302] ? __lock_acquire+0x1666/0x56c0 [ 783.026975][T29302] ___sys_recvmsg+0xd5/0x200 [ 783.031575][T29302] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 783.037224][T29302] ? find_held_lock+0x2d/0x110 [ 783.042004][T29302] ? __might_fault+0xd1/0x170 [ 783.046707][T29302] ? lock_downgrade+0x6e0/0x6e0 [ 783.051602][T29302] do_recvmmsg+0x24d/0x6d0 [ 783.056041][T29302] ? ___sys_recvmsg+0x200/0x200 [ 783.060924][T29302] ? find_held_lock+0x2d/0x110 [ 783.065704][T29302] ? __context_tracking_exit+0xb9/0xe0 [ 783.071210][T29302] ? lock_downgrade+0x6e0/0x6e0 [ 783.076086][T29302] __x64_sys_recvmmsg+0x20b/0x260 [ 783.081129][T29302] ? __do_sys_socketcall+0x590/0x590 [ 783.086518][T29302] ? syscall_enter_from_user_mode+0x21/0x70 [ 783.092429][T29302] do_syscall_64+0x35/0xb0 [ 783.096892][T29302] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 783.102796][T29302] RIP: 0033:0x7f067a2a6049 [ 783.107217][T29302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 783.126829][T29302] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 783.135262][T29302] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 783.143239][T29302] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:40:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x14000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 783.151213][T29302] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 783.159185][T29302] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 783.167158][T29302] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 783.175148][T29302] 12:40:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xc, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xfffffffe, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 53) [ 783.361018][T29314] FAULT_INJECTION: forcing a failure. [ 783.361018][T29314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.376805][T29314] CPU: 0 PID: 29314 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 783.387379][T29314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.397450][T29314] Call Trace: [ 783.400735][T29314] [ 783.403669][T29314] dump_stack_lvl+0xcd/0x134 [ 783.408272][T29314] should_fail.cold+0x5/0xa [ 783.412794][T29314] _copy_from_user+0x2c/0x180 [ 783.417486][T29314] __copy_msghdr_from_user+0x91/0x4b0 [ 783.422871][T29314] ? __ia32_sys_shutdown+0x70/0x70 [ 783.428019][T29314] ? __lock_acquire+0x1666/0x56c0 [ 783.433071][T29314] ___sys_recvmsg+0xd5/0x200 [ 783.437687][T29314] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 783.443338][T29314] ? find_held_lock+0x2d/0x110 [ 783.448132][T29314] ? __might_fault+0xd1/0x170 [ 783.452823][T29314] ? lock_downgrade+0x6e0/0x6e0 [ 783.457699][T29314] do_recvmmsg+0x24d/0x6d0 [ 783.462131][T29314] ? ___sys_recvmsg+0x200/0x200 [ 783.467005][T29314] ? find_held_lock+0x2d/0x110 [ 783.471782][T29314] ? __context_tracking_exit+0xb9/0xe0 [ 783.477266][T29314] ? lock_downgrade+0x6e0/0x6e0 [ 783.482157][T29314] __x64_sys_recvmmsg+0x20b/0x260 [ 783.487199][T29314] ? __do_sys_socketcall+0x590/0x590 [ 783.492502][T29314] ? syscall_enter_from_user_mode+0x21/0x70 [ 783.498424][T29314] do_syscall_64+0x35/0xb0 [ 783.502859][T29314] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 783.508771][T29314] RIP: 0033:0x7f067a2a6049 [ 783.513195][T29314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 783.534201][T29314] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 783.542626][T29314] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 783.550611][T29314] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 783.558594][T29314] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 783.566574][T29314] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 783.574723][T29314] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 783.582715][T29314] [ 783.586501][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022072c00: rx timeout, send abort [ 783.595252][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022070400: rx timeout, send abort [ 783.603843][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888022072c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 783.618290][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888022070400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:14 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0xffffffff00000000) 12:40:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x300, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 54) [ 783.786699][T29326] FAULT_INJECTION: forcing a failure. [ 783.786699][T29326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.811469][T29326] CPU: 1 PID: 29326 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 783.822027][T29326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.832105][T29326] Call Trace: [ 783.835409][T29326] [ 783.838355][T29326] dump_stack_lvl+0xcd/0x134 [ 783.842976][T29326] should_fail.cold+0x5/0xa [ 783.847517][T29326] _copy_from_user+0x2c/0x180 [ 783.852224][T29326] __copy_msghdr_from_user+0x91/0x4b0 [ 783.857626][T29326] ? __ia32_sys_shutdown+0x70/0x70 [ 783.862783][T29326] ? __lock_acquire+0x1666/0x56c0 [ 783.867843][T29326] ___sys_recvmsg+0xd5/0x200 [ 783.872454][T29326] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 783.878096][T29326] ? find_held_lock+0x2d/0x110 [ 783.882864][T29326] ? __might_fault+0xd1/0x170 [ 783.887535][T29326] ? lock_downgrade+0x6e0/0x6e0 [ 783.892389][T29326] do_recvmmsg+0x24d/0x6d0 [ 783.896800][T29326] ? ___sys_recvmsg+0x200/0x200 [ 783.901669][T29326] ? find_held_lock+0x2d/0x110 [ 783.906444][T29326] ? __context_tracking_exit+0xb9/0xe0 [ 783.911945][T29326] ? lock_downgrade+0x6e0/0x6e0 [ 783.916808][T29326] __x64_sys_recvmmsg+0x20b/0x260 [ 783.921832][T29326] ? __do_sys_socketcall+0x590/0x590 [ 783.927125][T29326] ? syscall_enter_from_user_mode+0x21/0x70 [ 783.933028][T29326] do_syscall_64+0x35/0xb0 [ 783.937476][T29326] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 783.943383][T29326] RIP: 0033:0x7f067a2a6049 [ 783.947809][T29326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 783.967430][T29326] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 783.975840][T29326] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 12:40:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 55) [ 783.983804][T29326] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 783.991787][T29326] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 783.999772][T29326] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 784.007751][T29326] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 784.015722][T29326] 12:40:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x16000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xe, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 784.151742][T29336] FAULT_INJECTION: forcing a failure. [ 784.151742][T29336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.171381][T29336] CPU: 1 PID: 29336 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 784.181941][T29336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.192030][T29336] Call Trace: [ 784.195311][T29336] [ 784.198232][T29336] dump_stack_lvl+0xcd/0x134 [ 784.202826][T29336] should_fail.cold+0x5/0xa [ 784.207333][T29336] _copy_from_user+0x2c/0x180 [ 784.212162][T29336] __copy_msghdr_from_user+0x91/0x4b0 [ 784.217532][T29336] ? __ia32_sys_shutdown+0x70/0x70 [ 784.222676][T29336] ? __lock_acquire+0x1666/0x56c0 [ 784.227706][T29336] ___sys_recvmsg+0xd5/0x200 [ 784.232315][T29336] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 784.237980][T29336] ? find_held_lock+0x2d/0x110 [ 784.242754][T29336] ? __might_fault+0xd1/0x170 [ 784.247432][T29336] ? lock_downgrade+0x6e0/0x6e0 [ 784.252304][T29336] do_recvmmsg+0x24d/0x6d0 [ 784.256719][T29336] ? ___sys_recvmsg+0x200/0x200 [ 784.261674][T29336] ? find_held_lock+0x2d/0x110 [ 784.266457][T29336] ? __context_tracking_exit+0xb9/0xe0 [ 784.271921][T29336] ? lock_downgrade+0x6e0/0x6e0 [ 784.276792][T29336] __x64_sys_recvmmsg+0x20b/0x260 [ 784.281810][T29336] ? __do_sys_socketcall+0x590/0x590 [ 784.287116][T29336] ? syscall_enter_from_user_mode+0x21/0x70 [ 784.293005][T29336] do_syscall_64+0x35/0xb0 [ 784.297415][T29336] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 784.303311][T29336] RIP: 0033:0x7f067a2a6049 [ 784.307727][T29336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 784.327458][T29336] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 784.335891][T29336] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 784.343875][T29336] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:40:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xffffffff, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 56) [ 784.351854][T29336] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 784.359818][T29336] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 784.367782][T29336] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 784.375762][T29336] 12:40:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x500, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 784.457088][T29344] FAULT_INJECTION: forcing a failure. [ 784.457088][T29344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.511630][T29344] CPU: 1 PID: 29344 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 784.522194][T29344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.532274][T29344] Call Trace: [ 784.535588][T29344] [ 784.538529][T29344] dump_stack_lvl+0xcd/0x134 [ 784.543156][T29344] should_fail.cold+0x5/0xa [ 784.547706][T29344] _copy_from_user+0x2c/0x180 [ 784.552412][T29344] __copy_msghdr_from_user+0x91/0x4b0 [ 784.557813][T29344] ? __ia32_sys_shutdown+0x70/0x70 [ 784.562938][T29344] ? __lock_acquire+0x1666/0x56c0 [ 784.567991][T29344] ___sys_recvmsg+0xd5/0x200 [ 784.572597][T29344] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 784.578247][T29344] ? find_held_lock+0x2d/0x110 [ 784.583027][T29344] ? __might_fault+0xd1/0x170 [ 784.587718][T29344] ? lock_downgrade+0x6e0/0x6e0 [ 784.592686][T29344] do_recvmmsg+0x24d/0x6d0 [ 784.597119][T29344] ? ___sys_recvmsg+0x200/0x200 [ 784.602005][T29344] ? find_held_lock+0x2d/0x110 [ 784.606782][T29344] ? __context_tracking_exit+0xb9/0xe0 [ 784.612285][T29344] ? lock_downgrade+0x6e0/0x6e0 [ 784.617152][T29344] __x64_sys_recvmmsg+0x20b/0x260 [ 784.622212][T29344] ? __do_sys_socketcall+0x590/0x590 [ 784.627513][T29344] ? syscall_enter_from_user_mode+0x21/0x70 [ 784.633429][T29344] do_syscall_64+0x35/0xb0 [ 784.637867][T29344] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 784.643786][T29344] RIP: 0033:0x7f067a2a6049 [ 784.648206][T29344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 784.667817][T29344] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 784.676270][T29344] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 784.684249][T29344] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 784.692227][T29344] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 784.700205][T29344] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 784.708192][T29344] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 784.716187][T29344] 12:40:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 57) [ 784.821279][T29354] FAULT_INJECTION: forcing a failure. [ 784.821279][T29354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.879332][T29354] CPU: 1 PID: 29354 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 784.889897][T29354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.899968][T29354] Call Trace: [ 784.903264][T29354] [ 784.906208][T29354] dump_stack_lvl+0xcd/0x134 [ 784.910826][T29354] should_fail.cold+0x5/0xa [ 784.915454][T29354] _copy_from_user+0x2c/0x180 [ 784.920160][T29354] __copy_msghdr_from_user+0x91/0x4b0 [ 784.925723][T29354] ? __ia32_sys_shutdown+0x70/0x70 [ 784.931038][T29354] ? __lock_acquire+0x1666/0x56c0 [ 784.936114][T29354] ___sys_recvmsg+0xd5/0x200 [ 784.940734][T29354] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 784.946401][T29354] ? find_held_lock+0x2d/0x110 [ 784.951181][T29354] ? __might_fault+0xd1/0x170 [ 784.956202][T29354] ? lock_downgrade+0x6e0/0x6e0 [ 784.961286][T29354] do_recvmmsg+0x24d/0x6d0 [ 784.965755][T29354] ? ___sys_recvmsg+0x200/0x200 [ 784.970626][T29354] ? find_held_lock+0x2d/0x110 [ 784.975051][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f4dd000: rx timeout, send abort [ 784.975429][T29354] ? __context_tracking_exit+0xb9/0xe0 [ 784.983863][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f4dd000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 784.989041][T29354] ? lock_downgrade+0x6e0/0x6e0 [ 785.003737][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f4de000: rx timeout, send abort [ 785.008388][T29354] __x64_sys_recvmmsg+0x20b/0x260 [ 785.016952][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f4de000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 785.021532][T29354] ? __do_sys_socketcall+0x590/0x590 [ 785.021573][T29354] ? syscall_enter_from_user_mode+0x21/0x70 [ 785.021613][T29354] do_syscall_64+0x35/0xb0 [ 785.051399][T29354] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 785.057381][T29354] RIP: 0033:0x7f067a2a6049 [ 785.061816][T29354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 785.081530][T29354] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 785.089968][T29354] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 785.097959][T29354] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 785.105934][T29354] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 785.113982][T29354] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 785.121945][T29354] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 12:40:16 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0xfffffffffffffffd}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r3, 0x0, {0x2, 0x1, 0x3}}, 0x18, &(0x7f0000000180)={&(0x7f0000000140)="91620da994c255098bd9d49125ca90c044", 0x11}, 0x1, 0x0, 0x0, 0x4000000}, 0x64000851) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 785.129918][T29354] 12:40:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 58) 12:40:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x12, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x18000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 785.193261][T29358] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 785.261009][T29364] FAULT_INJECTION: forcing a failure. [ 785.261009][T29364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.279201][T29364] CPU: 1 PID: 29364 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 785.289759][T29364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 785.299836][T29364] Call Trace: [ 785.303128][T29364] [ 785.306052][T29364] dump_stack_lvl+0xcd/0x134 [ 785.310657][T29364] should_fail.cold+0x5/0xa [ 785.315158][T29364] _copy_from_user+0x2c/0x180 [ 785.319832][T29364] __copy_msghdr_from_user+0x91/0x4b0 [ 785.325289][T29364] ? __ia32_sys_shutdown+0x70/0x70 [ 785.330411][T29364] ? __lock_acquire+0x1666/0x56c0 [ 785.335561][T29364] ___sys_recvmsg+0xd5/0x200 [ 785.340148][T29364] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 785.346307][T29364] ? find_held_lock+0x2d/0x110 [ 785.351093][T29364] ? __might_fault+0xd1/0x170 [ 785.355775][T29364] ? lock_downgrade+0x6e0/0x6e0 [ 785.360677][T29364] do_recvmmsg+0x24d/0x6d0 [ 785.365102][T29364] ? ___sys_recvmsg+0x200/0x200 [ 785.369975][T29364] ? find_held_lock+0x2d/0x110 [ 785.374764][T29364] ? __context_tracking_exit+0xb9/0xe0 [ 785.380237][T29364] ? lock_downgrade+0x6e0/0x6e0 [ 785.385355][T29364] __x64_sys_recvmmsg+0x20b/0x260 [ 785.390385][T29364] ? __do_sys_socketcall+0x590/0x590 [ 785.395689][T29364] ? syscall_enter_from_user_mode+0x21/0x70 [ 785.401583][T29364] do_syscall_64+0x35/0xb0 [ 785.405994][T29364] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 785.411893][T29364] RIP: 0033:0x7f067a2a6049 [ 785.416315][T29364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 785.436019][T29364] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 785.444512][T29364] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 785.452478][T29364] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:40:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 59) [ 785.460446][T29364] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 785.468444][T29364] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 785.476407][T29364] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 785.484468][T29364] [ 785.534971][T29371] FAULT_INJECTION: forcing a failure. [ 785.534971][T29371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.549311][T29371] CPU: 0 PID: 29371 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 785.559845][T29371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 785.569914][T29371] Call Trace: [ 785.573195][T29371] [ 785.576124][T29371] dump_stack_lvl+0xcd/0x134 [ 785.580724][T29371] should_fail.cold+0x5/0xa [ 785.585238][T29371] _copy_from_user+0x2c/0x180 [ 785.589957][T29371] __copy_msghdr_from_user+0x91/0x4b0 [ 785.595343][T29371] ? __ia32_sys_shutdown+0x70/0x70 [ 785.600461][T29371] ? __lock_acquire+0x1666/0x56c0 [ 785.605518][T29371] ___sys_recvmsg+0xd5/0x200 [ 785.610210][T29371] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 785.615895][T29371] ? find_held_lock+0x2d/0x110 [ 785.620673][T29371] ? __might_fault+0xd1/0x170 [ 785.625378][T29371] ? lock_downgrade+0x6e0/0x6e0 [ 785.630255][T29371] do_recvmmsg+0x24d/0x6d0 [ 785.634690][T29371] ? ___sys_recvmsg+0x200/0x200 [ 785.639557][T29371] ? find_held_lock+0x2d/0x110 [ 785.644341][T29371] ? __context_tracking_exit+0xb9/0xe0 [ 785.649821][T29371] ? lock_downgrade+0x6e0/0x6e0 [ 785.654688][T29371] __x64_sys_recvmmsg+0x20b/0x260 [ 785.659724][T29371] ? __do_sys_socketcall+0x590/0x590 [ 785.665021][T29371] ? syscall_enter_from_user_mode+0x21/0x70 [ 785.670930][T29371] do_syscall_64+0x35/0xb0 [ 785.675353][T29371] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 785.681269][T29371] RIP: 0033:0x7f067a2a6049 [ 785.685705][T29371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 785.705409][T29371] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 785.713825][T29371] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 785.721821][T29371] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:40:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x600, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 785.729793][T29371] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 785.737776][T29371] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 785.745849][T29371] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 785.753844][T29371] 12:40:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 60) [ 785.888951][T29378] FAULT_INJECTION: forcing a failure. [ 785.888951][T29378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.920562][T29378] CPU: 1 PID: 29378 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 785.931119][T29378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 785.941201][T29378] Call Trace: [ 785.944500][T29378] [ 785.947447][T29378] dump_stack_lvl+0xcd/0x134 [ 785.952071][T29378] should_fail.cold+0x5/0xa [ 785.956618][T29378] _copy_from_user+0x2c/0x180 [ 785.961329][T29378] __copy_msghdr_from_user+0x91/0x4b0 [ 785.966817][T29378] ? __ia32_sys_shutdown+0x70/0x70 [ 785.971945][T29378] ? __lock_acquire+0x1666/0x56c0 [ 785.977007][T29378] ___sys_recvmsg+0xd5/0x200 [ 785.981593][T29378] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 785.987228][T29378] ? find_held_lock+0x2d/0x110 [ 785.991988][T29378] ? __might_fault+0xd1/0x170 [ 785.996672][T29378] ? lock_downgrade+0x6e0/0x6e0 [ 786.001614][T29378] do_recvmmsg+0x24d/0x6d0 [ 786.006271][T29378] ? ___sys_recvmsg+0x200/0x200 [ 786.011166][T29378] ? find_held_lock+0x2d/0x110 [ 786.015954][T29378] ? __context_tracking_exit+0xb9/0xe0 [ 786.021438][T29378] ? lock_downgrade+0x6e0/0x6e0 [ 786.026362][T29378] __x64_sys_recvmmsg+0x20b/0x260 [ 786.031514][T29378] ? __do_sys_socketcall+0x590/0x590 [ 786.036812][T29378] ? syscall_enter_from_user_mode+0x21/0x70 [ 786.042721][T29378] do_syscall_64+0x35/0xb0 [ 786.047132][T29378] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 786.053024][T29378] RIP: 0033:0x7f067a2a6049 [ 786.057519][T29378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 786.077209][T29378] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 786.085650][T29378] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 786.093716][T29378] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 786.102041][T29378] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.110029][T29378] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 786.118012][T29378] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 786.125992][T29378] 12:40:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 61) 12:40:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x19000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x14, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 786.282678][T29392] __nla_validate_parse: 46 callbacks suppressed [ 786.282700][T29392] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 786.284186][T29390] FAULT_INJECTION: forcing a failure. [ 786.284186][T29390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.290215][T29393] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 786.334331][T29390] CPU: 0 PID: 29390 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 786.344902][T29390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.359757][T29390] Call Trace: [ 786.363062][T29390] [ 786.366019][T29390] dump_stack_lvl+0xcd/0x134 [ 786.370816][T29390] should_fail.cold+0x5/0xa [ 786.375357][T29390] _copy_from_user+0x2c/0x180 [ 786.380161][T29390] __copy_msghdr_from_user+0x91/0x4b0 [ 786.380656][T29376] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 786.385565][T29390] ? __ia32_sys_shutdown+0x70/0x70 [ 786.385600][T29390] ? __lock_acquire+0x1666/0x56c0 [ 786.385648][T29390] ___sys_recvmsg+0xd5/0x200 [ 786.385675][T29390] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 786.385711][T29390] ? find_held_lock+0x2d/0x110 [ 786.385743][T29390] ? __might_fault+0xd1/0x170 [ 786.385773][T29390] ? lock_downgrade+0x6e0/0x6e0 [ 786.385812][T29390] do_recvmmsg+0x24d/0x6d0 [ 786.385842][T29390] ? ___sys_recvmsg+0x200/0x200 [ 786.385879][T29390] ? find_held_lock+0x2d/0x110 [ 786.385911][T29390] ? __context_tracking_exit+0xb9/0xe0 [ 786.385956][T29390] ? lock_downgrade+0x6e0/0x6e0 [ 786.385990][T29390] __x64_sys_recvmmsg+0x20b/0x260 [ 786.386021][T29390] ? __do_sys_socketcall+0x590/0x590 [ 786.386053][T29390] ? syscall_enter_from_user_mode+0x21/0x70 [ 786.386090][T29390] do_syscall_64+0x35/0xb0 [ 786.386115][T29390] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 786.386147][T29390] RIP: 0033:0x7f067a2a6049 [ 786.386170][T29390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 786.386194][T29390] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 786.386221][T29390] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 786.386239][T29390] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:40:17 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0xfffffffffffffffd}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r3, 0x0, {0x2, 0x1, 0x3}}, 0x18, &(0x7f0000000180)={&(0x7f0000000140)="91620da994c255098bd9d49125ca90c044", 0x11}, 0x1, 0x0, 0x0, 0x4000000}, 0x64000851) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0xfffffffffffffffd}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r3, 0x0, {0x2, 0x1, 0x3}}, 0x18, &(0x7f0000000180)={&(0x7f0000000140)="91620da994c255098bd9d49125ca90c044", 0x11}, 0x1, 0x0, 0x0, 0x4000000}, 0x64000851) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) 12:40:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 786.529434][T29390] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.537421][T29390] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 786.545407][T29390] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 786.553418][T29390] [ 786.557441][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880738ce400: rx timeout, send abort [ 786.566213][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880738ce400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 62) 12:40:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x700, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 786.652026][T29392] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 786.689884][T29400] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd 12:40:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 786.709421][T29403] FAULT_INJECTION: forcing a failure. [ 786.709421][T29403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.731804][T29407] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 786.759324][T29415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 786.769353][T29393] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 786.789302][T29403] CPU: 1 PID: 29403 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 786.799948][T29403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.810113][T29403] Call Trace: [ 786.813414][T29403] [ 786.816360][T29403] dump_stack_lvl+0xcd/0x134 [ 786.820981][T29403] should_fail.cold+0x5/0xa [ 786.825529][T29403] _copy_from_user+0x2c/0x180 [ 786.830245][T29403] __copy_msghdr_from_user+0x91/0x4b0 [ 786.835659][T29403] ? __ia32_sys_shutdown+0x70/0x70 [ 786.840795][T29403] ? __lock_acquire+0x1666/0x56c0 [ 786.845871][T29403] ___sys_recvmsg+0xd5/0x200 [ 786.849497][T29392] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 786.850491][T29403] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 786.850540][T29403] ? find_held_lock+0x2d/0x110 [ 786.870181][T29403] ? __might_fault+0xd1/0x170 [ 786.874855][T29403] ? lock_downgrade+0x6e0/0x6e0 [ 786.879707][T29403] do_recvmmsg+0x24d/0x6d0 [ 786.884121][T29403] ? ___sys_recvmsg+0x200/0x200 [ 786.888974][T29403] ? find_held_lock+0x2d/0x110 [ 786.893741][T29403] ? __context_tracking_exit+0xb9/0xe0 [ 786.899229][T29403] ? lock_downgrade+0x6e0/0x6e0 [ 786.904415][T29403] __x64_sys_recvmmsg+0x20b/0x260 [ 786.909521][T29403] ? __do_sys_socketcall+0x590/0x590 [ 786.914809][T29403] ? syscall_enter_from_user_mode+0x21/0x70 [ 786.920702][T29403] do_syscall_64+0x35/0xb0 [ 786.925113][T29403] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 786.931019][T29403] RIP: 0033:0x7f067a2a6049 [ 786.935432][T29403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 786.955051][T29403] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 786.963663][T29403] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 786.971654][T29403] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 786.980272][T29403] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.988252][T29403] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 786.996221][T29403] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 787.004228][T29403] 12:40:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 63) 12:40:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x16, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1f000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 787.099970][T29415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 787.127347][T29425] FAULT_INJECTION: forcing a failure. [ 787.127347][T29425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.161688][T29425] CPU: 0 PID: 29425 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 787.172239][T29425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.182313][T29425] Call Trace: [ 787.185605][T29425] [ 787.188549][T29425] dump_stack_lvl+0xcd/0x134 [ 787.193165][T29425] should_fail.cold+0x5/0xa [ 787.197708][T29425] _copy_from_user+0x2c/0x180 [ 787.202414][T29425] __copy_msghdr_from_user+0x91/0x4b0 12:40:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 787.207913][T29425] ? __ia32_sys_shutdown+0x70/0x70 [ 787.213053][T29425] ? __lock_acquire+0x1666/0x56c0 [ 787.218123][T29425] ___sys_recvmsg+0xd5/0x200 [ 787.222752][T29425] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 787.224095][T29427] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 787.228414][T29425] ? find_held_lock+0x2d/0x110 [ 787.228456][T29425] ? __might_fault+0xd1/0x170 [ 787.247134][T29425] ? lock_downgrade+0x6e0/0x6e0 [ 787.252020][T29425] do_recvmmsg+0x24d/0x6d0 [ 787.256447][T29425] ? ___sys_recvmsg+0x200/0x200 [ 787.261306][T29425] ? find_held_lock+0x2d/0x110 [ 787.266078][T29425] ? __context_tracking_exit+0xb9/0xe0 [ 787.271578][T29425] ? lock_downgrade+0x6e0/0x6e0 [ 787.276442][T29425] __x64_sys_recvmmsg+0x20b/0x260 [ 787.281481][T29425] ? __do_sys_socketcall+0x590/0x590 [ 787.286800][T29425] ? syscall_enter_from_user_mode+0x21/0x70 [ 787.292711][T29425] do_syscall_64+0x35/0xb0 [ 787.297141][T29425] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 787.303057][T29425] RIP: 0033:0x7f067a2a6049 [ 787.307498][T29425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 787.327114][T29425] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 787.335549][T29425] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 787.343521][T29425] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 787.351508][T29425] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 12:40:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 64) [ 787.359487][T29425] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 787.367473][T29425] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 787.375466][T29425] [ 787.393322][T29431] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 787.482468][T29437] FAULT_INJECTION: forcing a failure. [ 787.482468][T29437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.501944][T29437] CPU: 1 PID: 29437 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 787.512505][T29437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.522583][T29437] Call Trace: [ 787.525880][T29437] [ 787.528822][T29437] dump_stack_lvl+0xcd/0x134 [ 787.533466][T29437] should_fail.cold+0x5/0xa [ 787.537996][T29437] _copy_from_user+0x2c/0x180 [ 787.542694][T29437] __copy_msghdr_from_user+0x91/0x4b0 [ 787.548079][T29437] ? __ia32_sys_shutdown+0x70/0x70 [ 787.553204][T29437] ? __lock_acquire+0x1666/0x56c0 [ 787.558262][T29437] ___sys_recvmsg+0xd5/0x200 [ 787.562870][T29437] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 787.568525][T29437] ? find_held_lock+0x2d/0x110 [ 787.573415][T29437] ? __might_fault+0xd1/0x170 [ 787.578126][T29437] ? lock_downgrade+0x6e0/0x6e0 [ 787.583005][T29437] do_recvmmsg+0x24d/0x6d0 [ 787.587436][T29437] ? ___sys_recvmsg+0x200/0x200 [ 787.592305][T29437] ? find_held_lock+0x2d/0x110 [ 787.597094][T29437] ? __context_tracking_exit+0xb9/0xe0 [ 787.602567][T29437] ? lock_downgrade+0x6e0/0x6e0 [ 787.607431][T29437] __x64_sys_recvmmsg+0x20b/0x260 [ 787.612464][T29437] ? __do_sys_socketcall+0x590/0x590 [ 787.617762][T29437] ? syscall_enter_from_user_mode+0x21/0x70 [ 787.623669][T29437] do_syscall_64+0x35/0xb0 [ 787.628087][T29437] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 787.633988][T29437] RIP: 0033:0x7f067a2a6049 [ 787.638402][T29437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 787.658546][T29437] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 787.666966][T29437] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 787.674939][T29437] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 787.683068][T29437] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 787.691068][T29437] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 787.700622][T29437] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 787.708701][T29437] 12:40:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 65) 12:40:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x20000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:19 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0xfffffffffffffffd}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r3, 0x0, {0x2, 0x1, 0x3}}, 0x18, &(0x7f0000000180)={&(0x7f0000000140)="91620da994c255098bd9d49125ca90c044", 0x11}, 0x1, 0x0, 0x0, 0x4000000}, 0x64000851) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 12:40:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x18, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x900, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 787.936588][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021607800: rx timeout, send abort [ 787.945712][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888021607800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 787.991337][T29448] FAULT_INJECTION: forcing a failure. [ 787.991337][T29448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.015506][T29448] CPU: 1 PID: 29448 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 788.026059][T29448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 12:40:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 788.028717][T29455] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 788.036148][T29448] Call Trace: [ 788.036161][T29448] [ 788.036172][T29448] dump_stack_lvl+0xcd/0x134 [ 788.036207][T29448] should_fail.cold+0x5/0xa [ 788.036243][T29448] _copy_from_user+0x2c/0x180 [ 788.063668][T29448] __copy_msghdr_from_user+0x91/0x4b0 [ 788.069079][T29448] ? __ia32_sys_shutdown+0x70/0x70 [ 788.074192][T29448] ? __lock_acquire+0x1666/0x56c0 [ 788.079328][T29448] ___sys_recvmsg+0xd5/0x200 [ 788.084009][T29448] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 788.089671][T29448] ? find_held_lock+0x2d/0x110 [ 788.094537][T29448] ? __might_fault+0xd1/0x170 [ 788.099220][T29448] ? lock_downgrade+0x6e0/0x6e0 [ 788.104112][T29448] do_recvmmsg+0x24d/0x6d0 [ 788.108573][T29448] ? ___sys_recvmsg+0x200/0x200 [ 788.113453][T29448] ? find_held_lock+0x2d/0x110 [ 788.118219][T29448] ? __context_tracking_exit+0xb9/0xe0 [ 788.123690][T29448] ? lock_downgrade+0x6e0/0x6e0 [ 788.128567][T29448] __x64_sys_recvmmsg+0x20b/0x260 [ 788.133882][T29448] ? __do_sys_socketcall+0x590/0x590 [ 788.139460][T29448] ? syscall_enter_from_user_mode+0x21/0x70 [ 788.145619][T29448] do_syscall_64+0x35/0xb0 [ 788.150606][T29448] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 788.156959][T29448] RIP: 0033:0x7f067a2a6049 [ 788.161428][T29448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 788.181248][T29448] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 12:40:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 788.189775][T29448] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 788.197773][T29448] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 788.205810][T29448] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 788.213791][T29448] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 788.221910][T29448] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 788.229919][T29448] 12:40:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 66) 12:40:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0xb}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 788.355398][T29464] FAULT_INJECTION: forcing a failure. [ 788.355398][T29464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.377026][T29464] CPU: 1 PID: 29464 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 788.387589][T29464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.397669][T29464] Call Trace: [ 788.400973][T29464] [ 788.403922][T29464] dump_stack_lvl+0xcd/0x134 [ 788.408748][T29464] should_fail.cold+0x5/0xa [ 788.413279][T29464] _copy_from_user+0x2c/0x180 [ 788.417980][T29464] __copy_msghdr_from_user+0x91/0x4b0 [ 788.423365][T29464] ? __ia32_sys_shutdown+0x70/0x70 [ 788.428471][T29464] ? __lock_acquire+0x1666/0x56c0 [ 788.433502][T29464] ___sys_recvmsg+0xd5/0x200 [ 788.438094][T29464] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 788.443730][T29464] ? find_held_lock+0x2d/0x110 [ 788.448604][T29464] ? __might_fault+0xd1/0x170 [ 788.453302][T29464] ? lock_downgrade+0x6e0/0x6e0 [ 788.458206][T29464] do_recvmmsg+0x24d/0x6d0 [ 788.462801][T29464] ? ___sys_recvmsg+0x200/0x200 [ 788.467692][T29464] ? find_held_lock+0x2d/0x110 [ 788.472486][T29464] ? __context_tracking_exit+0xb9/0xe0 [ 788.477950][T29464] ? lock_downgrade+0x6e0/0x6e0 [ 788.482820][T29464] __x64_sys_recvmmsg+0x20b/0x260 [ 788.487874][T29464] ? __do_sys_socketcall+0x590/0x590 [ 788.493168][T29464] ? syscall_enter_from_user_mode+0x21/0x70 [ 788.499089][T29464] do_syscall_64+0x35/0xb0 [ 788.503504][T29464] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 788.509396][T29464] RIP: 0033:0x7f067a2a6049 [ 788.513844][T29464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 788.533447][T29464] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 788.541869][T29464] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 12:40:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0xc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 788.549851][T29464] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 788.557829][T29464] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 788.565817][T29464] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 788.573810][T29464] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 788.581808][T29464] 12:40:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 67) [ 788.740610][T29475] FAULT_INJECTION: forcing a failure. [ 788.740610][T29475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.776097][T29475] CPU: 0 PID: 29475 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 788.786657][T29475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.796746][T29475] Call Trace: [ 788.800046][T29475] [ 788.802987][T29475] dump_stack_lvl+0xcd/0x134 [ 788.807600][T29475] should_fail.cold+0x5/0xa [ 788.812138][T29475] _copy_from_user+0x2c/0x180 [ 788.816853][T29475] __copy_msghdr_from_user+0x91/0x4b0 [ 788.822253][T29475] ? __ia32_sys_shutdown+0x70/0x70 [ 788.827428][T29475] ? __lock_acquire+0x1666/0x56c0 [ 788.832584][T29475] ___sys_recvmsg+0xd5/0x200 [ 788.837207][T29475] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 788.842882][T29475] ? find_held_lock+0x2d/0x110 [ 788.847683][T29475] ? __might_fault+0xd1/0x170 [ 788.852384][T29475] ? lock_downgrade+0x6e0/0x6e0 [ 788.857245][T29475] do_recvmmsg+0x24d/0x6d0 [ 788.861753][T29475] ? ___sys_recvmsg+0x200/0x200 [ 788.866627][T29475] ? find_held_lock+0x2d/0x110 [ 788.871422][T29475] ? __context_tracking_exit+0xb9/0xe0 [ 788.876897][T29475] ? lock_downgrade+0x6e0/0x6e0 [ 788.881774][T29475] __x64_sys_recvmmsg+0x20b/0x260 [ 788.886806][T29475] ? __do_sys_socketcall+0x590/0x590 [ 788.892112][T29475] ? syscall_enter_from_user_mode+0x21/0x70 [ 788.898008][T29475] do_syscall_64+0x35/0xb0 [ 788.902422][T29475] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 788.908348][T29475] RIP: 0033:0x7f067a2a6049 [ 788.912787][T29475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 788.932427][T29475] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 788.940851][T29475] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 788.948906][T29475] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 788.956923][T29475] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 788.965013][T29475] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 788.973005][T29475] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 788.980998][T29475] 12:40:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x91f, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0xe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:20 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x9, &(0x7f00000000c0)={&(0x7f0000000180)="7bddefd074fa32a23743f5566560505cbd031287275090340fe583368d87873e7dab0c6ac2116e57b8818fd364cad9c0a0baebb128e63080ebf13e58c5", 0x3d}, 0x1, 0x0, 0x0, 0x8800}, 0x40) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 12:40:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x19, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 68) 12:40:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x48000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 789.297948][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e155400: rx timeout, send abort [ 789.306317][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e155400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x12}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 789.368693][T29482] FAULT_INJECTION: forcing a failure. [ 789.368693][T29482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.395073][T29482] CPU: 1 PID: 29482 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 789.405642][T29482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.415698][T29482] Call Trace: [ 789.418999][T29482] [ 789.421939][T29482] dump_stack_lvl+0xcd/0x134 [ 789.426549][T29482] should_fail.cold+0x5/0xa [ 789.431176][T29482] _copy_from_user+0x2c/0x180 [ 789.435893][T29482] __copy_msghdr_from_user+0x91/0x4b0 [ 789.441307][T29482] ? __ia32_sys_shutdown+0x70/0x70 [ 789.446442][T29482] ? __lock_acquire+0x1666/0x56c0 [ 789.451490][T29482] ___sys_recvmsg+0xd5/0x200 [ 789.456106][T29482] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 789.461869][T29482] ? find_held_lock+0x2d/0x110 [ 789.466645][T29482] ? __might_fault+0xd1/0x170 [ 789.471341][T29482] ? lock_downgrade+0x6e0/0x6e0 [ 789.476230][T29482] do_recvmmsg+0x24d/0x6d0 [ 789.480678][T29482] ? ___sys_recvmsg+0x200/0x200 [ 789.485556][T29482] ? find_held_lock+0x2d/0x110 [ 789.490322][T29482] ? __context_tracking_exit+0xb9/0xe0 [ 789.495787][T29482] ? lock_downgrade+0x6e0/0x6e0 [ 789.500651][T29482] __x64_sys_recvmmsg+0x20b/0x260 [ 789.505706][T29482] ? __do_sys_socketcall+0x590/0x590 [ 789.511003][T29482] ? syscall_enter_from_user_mode+0x21/0x70 [ 789.516924][T29482] do_syscall_64+0x35/0xb0 [ 789.521337][T29482] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 789.527231][T29482] RIP: 0033:0x7f067a2a6049 [ 789.531673][T29482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 789.551415][T29482] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 789.559838][T29482] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 12:40:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x14}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 69) [ 789.567920][T29482] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 789.575888][T29482] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 789.583871][T29482] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 789.591861][T29482] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 789.599942][T29482] [ 789.709662][T29496] FAULT_INJECTION: forcing a failure. [ 789.709662][T29496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.726809][T29496] CPU: 1 PID: 29496 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 789.737387][T29496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.747481][T29496] Call Trace: [ 789.750781][T29496] [ 789.753724][T29496] dump_stack_lvl+0xcd/0x134 [ 789.758327][T29496] should_fail.cold+0x5/0xa [ 789.762883][T29496] _copy_from_user+0x2c/0x180 [ 789.767584][T29496] __copy_msghdr_from_user+0x91/0x4b0 [ 789.772966][T29496] ? __ia32_sys_shutdown+0x70/0x70 [ 789.778088][T29496] ? __lock_acquire+0x1666/0x56c0 [ 789.783138][T29496] ___sys_recvmsg+0xd5/0x200 [ 789.787750][T29496] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 789.793413][T29496] ? find_held_lock+0x2d/0x110 [ 789.798191][T29496] ? __might_fault+0xd1/0x170 [ 789.802891][T29496] ? lock_downgrade+0x6e0/0x6e0 [ 789.807771][T29496] do_recvmmsg+0x24d/0x6d0 [ 789.812208][T29496] ? ___sys_recvmsg+0x200/0x200 [ 789.817159][T29496] ? find_held_lock+0x2d/0x110 [ 789.822027][T29496] ? __context_tracking_exit+0xb9/0xe0 [ 789.827501][T29496] ? lock_downgrade+0x6e0/0x6e0 [ 789.832365][T29496] __x64_sys_recvmmsg+0x20b/0x260 [ 789.837426][T29496] ? __do_sys_socketcall+0x590/0x590 [ 789.842736][T29496] ? syscall_enter_from_user_mode+0x21/0x70 [ 789.848651][T29496] do_syscall_64+0x35/0xb0 [ 789.853075][T29496] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 789.858978][T29496] RIP: 0033:0x7f067a2a6049 [ 789.863392][T29496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 789.883003][T29496] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 789.891422][T29496] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 789.899397][T29496] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:40:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x16}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 789.907369][T29496] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 789.915358][T29496] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 789.923328][T29496] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 789.931320][T29496] 12:40:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 70) 12:40:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x18}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 790.064676][T29506] FAULT_INJECTION: forcing a failure. [ 790.064676][T29506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.116524][T29506] CPU: 0 PID: 29506 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 790.127119][T29506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.137202][T29506] Call Trace: [ 790.140507][T29506] [ 790.143454][T29506] dump_stack_lvl+0xcd/0x134 [ 790.148079][T29506] should_fail.cold+0x5/0xa [ 790.152619][T29506] _copy_from_user+0x2c/0x180 [ 790.157334][T29506] __copy_msghdr_from_user+0x91/0x4b0 [ 790.162734][T29506] ? __ia32_sys_shutdown+0x70/0x70 [ 790.168044][T29506] ? __lock_acquire+0x1666/0x56c0 [ 790.173106][T29506] ___sys_recvmsg+0xd5/0x200 [ 790.177703][T29506] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 790.183361][T29506] ? find_held_lock+0x2d/0x110 [ 790.188161][T29506] ? __might_fault+0xd1/0x170 [ 790.192843][T29506] ? lock_downgrade+0x6e0/0x6e0 [ 790.197721][T29506] do_recvmmsg+0x24d/0x6d0 [ 790.202155][T29506] ? ___sys_recvmsg+0x200/0x200 [ 790.207057][T29506] ? find_held_lock+0x2d/0x110 [ 790.211859][T29506] ? __context_tracking_exit+0xb9/0xe0 [ 790.217359][T29506] ? lock_downgrade+0x6e0/0x6e0 [ 790.222247][T29506] __x64_sys_recvmmsg+0x20b/0x260 [ 790.227277][T29506] ? __do_sys_socketcall+0x590/0x590 [ 790.232569][T29506] ? syscall_enter_from_user_mode+0x21/0x70 [ 790.238489][T29506] do_syscall_64+0x35/0xb0 [ 790.242904][T29506] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 790.248806][T29506] RIP: 0033:0x7f067a2a6049 [ 790.253276][T29506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 790.272985][T29506] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 790.281418][T29506] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 790.289392][T29506] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 790.297360][T29506] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 790.305444][T29506] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:40:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x19}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xa00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 790.313432][T29506] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 790.321427][T29506] 12:40:21 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x9, &(0x7f00000000c0)={&(0x7f0000000180)="7bddefd074fa32a23743f5566560505cbd031287275090340fe583368d87873e7dab0c6ac2116e57b8818fd364cad9c0a0baebb128e63080ebf13e58c5", 0x3d}, 0x1, 0x0, 0x0, 0x8800}, 0x40) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x9, &(0x7f00000000c0)={&(0x7f0000000180)="7bddefd074fa32a23743f5566560505cbd031287275090340fe583368d87873e7dab0c6ac2116e57b8818fd364cad9c0a0baebb128e63080ebf13e58c5", 0x3d}, 0x1, 0x0, 0x0, 0x8800}, 0x40) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) 12:40:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 71) 12:40:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x48, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4c000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x48}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xb00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 790.655155][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e20ac00: rx timeout, send abort [ 790.663580][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e20ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x4c}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 790.718862][T29520] FAULT_INJECTION: forcing a failure. [ 790.718862][T29520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.751412][T29520] CPU: 1 PID: 29520 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 790.761976][T29520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.772041][T29520] Call Trace: [ 790.775350][T29520] [ 790.778281][T29520] dump_stack_lvl+0xcd/0x134 [ 790.782897][T29520] should_fail.cold+0x5/0xa [ 790.787417][T29520] _copy_from_user+0x2c/0x180 [ 790.792108][T29520] __copy_msghdr_from_user+0x91/0x4b0 [ 790.797498][T29520] ? __ia32_sys_shutdown+0x70/0x70 [ 790.802627][T29520] ? __lock_acquire+0x1666/0x56c0 [ 790.807684][T29520] ___sys_recvmsg+0xd5/0x200 [ 790.812284][T29520] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 790.817935][T29520] ? find_held_lock+0x2d/0x110 [ 790.822711][T29520] ? __might_fault+0xd1/0x170 [ 790.827396][T29520] ? lock_downgrade+0x6e0/0x6e0 [ 790.832290][T29520] do_recvmmsg+0x24d/0x6d0 [ 790.836721][T29520] ? ___sys_recvmsg+0x200/0x200 [ 790.841587][T29520] ? find_held_lock+0x2d/0x110 [ 790.846365][T29520] ? __context_tracking_exit+0xb9/0xe0 [ 790.851843][T29520] ? lock_downgrade+0x6e0/0x6e0 [ 790.856723][T29520] __x64_sys_recvmmsg+0x20b/0x260 [ 790.861774][T29520] ? __do_sys_socketcall+0x590/0x590 [ 790.867071][T29520] ? syscall_enter_from_user_mode+0x21/0x70 [ 790.872984][T29520] do_syscall_64+0x35/0xb0 [ 790.877820][T29520] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 790.883726][T29520] RIP: 0033:0x7f067a2a6049 [ 790.888147][T29520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 790.907764][T29520] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 12:40:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x60}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 790.916197][T29520] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 790.924170][T29520] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 790.932142][T29520] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 790.940126][T29520] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 790.948187][T29520] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 790.956175][T29520] 12:40:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 72) 12:40:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x68}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 791.082179][T29540] FAULT_INJECTION: forcing a failure. [ 791.082179][T29540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.096661][T29540] CPU: 1 PID: 29540 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 791.107203][T29540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.117281][T29540] Call Trace: [ 791.120577][T29540] [ 791.123532][T29540] dump_stack_lvl+0xcd/0x134 [ 791.128151][T29540] should_fail.cold+0x5/0xa [ 791.132692][T29540] _copy_from_user+0x2c/0x180 [ 791.137389][T29540] __copy_msghdr_from_user+0x91/0x4b0 [ 791.142874][T29540] ? __ia32_sys_shutdown+0x70/0x70 [ 791.147990][T29540] ? __lock_acquire+0x1666/0x56c0 [ 791.153058][T29540] ___sys_recvmsg+0xd5/0x200 [ 791.157810][T29540] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 791.163473][T29540] ? find_held_lock+0x2d/0x110 [ 791.168389][T29540] ? __might_fault+0xd1/0x170 [ 791.173098][T29540] ? lock_downgrade+0x6e0/0x6e0 [ 791.177990][T29540] do_recvmmsg+0x24d/0x6d0 [ 791.182427][T29540] ? ___sys_recvmsg+0x200/0x200 [ 791.187301][T29540] ? find_held_lock+0x2d/0x110 [ 791.192326][T29540] ? __context_tracking_exit+0xb9/0xe0 [ 791.197850][T29540] ? lock_downgrade+0x6e0/0x6e0 [ 791.202753][T29540] __x64_sys_recvmmsg+0x20b/0x260 [ 791.207803][T29540] ? __do_sys_socketcall+0x590/0x590 [ 791.213212][T29540] ? syscall_enter_from_user_mode+0x21/0x70 [ 791.219148][T29540] do_syscall_64+0x35/0xb0 [ 791.223745][T29540] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 791.229768][T29540] RIP: 0033:0x7f067a2a6049 [ 791.234315][T29540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 791.253944][T29540] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 791.262512][T29540] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 791.270504][T29540] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:40:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x6c}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 791.278475][T29540] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 791.286571][T29540] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 791.294570][T29540] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 791.302574][T29540] 12:40:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 73) [ 791.406437][T29548] FAULT_INJECTION: forcing a failure. [ 791.406437][T29548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.459231][T29548] CPU: 0 PID: 29548 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 791.469787][T29548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.479866][T29548] Call Trace: [ 791.483160][T29548] [ 791.486103][T29548] dump_stack_lvl+0xcd/0x134 [ 791.490722][T29548] should_fail.cold+0x5/0xa [ 791.495260][T29548] _copy_from_user+0x2c/0x180 [ 791.499966][T29548] __copy_msghdr_from_user+0x91/0x4b0 [ 791.505468][T29548] ? __ia32_sys_shutdown+0x70/0x70 [ 791.510612][T29548] ? __lock_acquire+0x1666/0x56c0 [ 791.515775][T29548] ___sys_recvmsg+0xd5/0x200 [ 791.520399][T29548] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 791.526070][T29548] ? find_held_lock+0x2d/0x110 [ 791.530873][T29548] ? __might_fault+0xd1/0x170 [ 791.535664][T29548] ? lock_downgrade+0x6e0/0x6e0 [ 791.539724][T29527] __nla_validate_parse: 31 callbacks suppressed [ 791.539742][T29527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 791.540553][T29548] do_recvmmsg+0x24d/0x6d0 [ 791.540593][T29548] ? ___sys_recvmsg+0x200/0x200 [ 791.540633][T29548] ? find_held_lock+0x2d/0x110 [ 791.570201][T29548] ? __context_tracking_exit+0xb9/0xe0 [ 791.575680][T29548] ? lock_downgrade+0x6e0/0x6e0 [ 791.580546][T29548] __x64_sys_recvmmsg+0x20b/0x260 [ 791.585687][T29548] ? __do_sys_socketcall+0x590/0x590 [ 791.590982][T29548] ? syscall_enter_from_user_mode+0x21/0x70 [ 791.596892][T29548] do_syscall_64+0x35/0xb0 [ 791.601317][T29548] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 791.607225][T29548] RIP: 0033:0x7f067a2a6049 [ 791.611646][T29548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 791.631261][T29548] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 791.639680][T29548] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 791.647652][T29548] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 791.655623][T29548] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 791.663640][T29548] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 791.671955][T29548] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 791.679939][T29548] [ 791.998299][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e518800: rx timeout, send abort [ 792.006755][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e518800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:24 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x9, &(0x7f00000000c0)={&(0x7f0000000180)="7bddefd074fa32a23743f5566560505cbd031287275090340fe583368d87873e7dab0c6ac2116e57b8818fd364cad9c0a0baebb128e63080ebf13e58c5", 0x3d}, 0x1, 0x0, 0x0, 0x8800}, 0x40) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 12:40:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x74}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4c, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4d1b0000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xc00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 74) [ 793.281331][ C1] vcan0: j1939_tp_rxtimer: 0xffff888019631c00: rx timeout, send abort [ 793.289732][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888019631c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 793.342580][T29560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 793.357390][T29559] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 793.369847][T29563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 793.382325][T29561] FAULT_INJECTION: forcing a failure. [ 793.382325][T29561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.406226][T29561] CPU: 0 PID: 29561 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 793.416804][T29561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.427269][T29561] Call Trace: [ 793.430559][T29561] [ 793.433530][T29561] dump_stack_lvl+0xcd/0x134 [ 793.438161][T29561] should_fail.cold+0x5/0xa [ 793.442996][T29561] _copy_from_user+0x2c/0x180 [ 793.447715][T29561] __copy_msghdr_from_user+0x91/0x4b0 [ 793.453123][T29561] ? __ia32_sys_shutdown+0x70/0x70 [ 793.458270][T29561] ? __lock_acquire+0x1666/0x56c0 [ 793.463449][T29561] ___sys_recvmsg+0xd5/0x200 [ 793.468088][T29561] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 793.473759][T29561] ? find_held_lock+0x2d/0x110 [ 793.478559][T29561] ? __might_fault+0xd1/0x170 [ 793.483272][T29561] ? lock_downgrade+0x6e0/0x6e0 [ 793.488255][T29561] do_recvmmsg+0x24d/0x6d0 [ 793.492796][T29561] ? ___sys_recvmsg+0x200/0x200 [ 793.497685][T29561] ? find_held_lock+0x2d/0x110 [ 793.502489][T29561] ? __context_tracking_exit+0xb9/0xe0 [ 793.507988][T29561] ? lock_downgrade+0x6e0/0x6e0 [ 793.513004][T29561] __x64_sys_recvmmsg+0x20b/0x260 [ 793.518206][T29561] ? __do_sys_socketcall+0x590/0x590 [ 793.523532][T29561] ? syscall_enter_from_user_mode+0x21/0x70 [ 793.529463][T29561] do_syscall_64+0x35/0xb0 [ 793.534062][T29561] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 793.539987][T29561] RIP: 0033:0x7f067a2a6049 [ 793.544515][T29561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 793.564231][T29561] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 793.572669][T29561] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 793.580681][T29561] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:40:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x7a}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 793.588771][T29561] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 793.596769][T29561] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 793.604761][T29561] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 793.612793][T29561] 12:40:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x94}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 75) [ 793.728123][T29560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:40:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x9b}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 793.795691][T29559] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 793.811912][T29563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 793.858682][T29575] FAULT_INJECTION: forcing a failure. [ 793.858682][T29575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.912199][T29575] CPU: 1 PID: 29575 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 793.922935][T29575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.933185][T29575] Call Trace: [ 793.936679][T29575] [ 793.939624][T29575] dump_stack_lvl+0xcd/0x134 [ 793.944240][T29575] should_fail.cold+0x5/0xa [ 793.948834][T29575] _copy_from_user+0x2c/0x180 [ 793.953576][T29575] __copy_msghdr_from_user+0x91/0x4b0 [ 793.959379][T29575] ? __ia32_sys_shutdown+0x70/0x70 [ 793.964524][T29575] ? __lock_acquire+0x1666/0x56c0 [ 793.969604][T29575] ___sys_recvmsg+0xd5/0x200 [ 793.974234][T29575] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 793.979915][T29575] ? find_held_lock+0x2d/0x110 [ 793.984713][T29575] ? __might_fault+0xd1/0x170 [ 793.989428][T29575] ? lock_downgrade+0x6e0/0x6e0 [ 793.994326][T29575] do_recvmmsg+0x24d/0x6d0 [ 793.998808][T29575] ? ___sys_recvmsg+0x200/0x200 [ 794.003787][T29575] ? find_held_lock+0x2d/0x110 [ 794.008601][T29575] ? __context_tracking_exit+0xb9/0xe0 [ 794.014083][T29575] ? lock_downgrade+0x6e0/0x6e0 [ 794.018961][T29575] __x64_sys_recvmmsg+0x20b/0x260 [ 794.024025][T29575] ? __do_sys_socketcall+0x590/0x590 [ 794.029341][T29575] ? syscall_enter_from_user_mode+0x21/0x70 [ 794.035251][T29575] do_syscall_64+0x35/0xb0 [ 794.039702][T29575] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 794.045608][T29575] RIP: 0033:0x7f067a2a6049 [ 794.050033][T29575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 794.069664][T29575] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 794.078260][T29575] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 794.086268][T29575] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 794.094376][T29575] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 794.102380][T29575] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 794.110394][T29575] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 794.118386][T29575] 12:40:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4e060000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 794.271214][T29584] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 794.278048][T29586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 794.364534][T29586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:40:25 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0xfffffffffffffeeb) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) 12:40:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4f, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xe00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 76) 12:40:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x60000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 794.648546][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b98f400: rx timeout, send abort [ 794.657851][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b98f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 794.709994][T29600] FAULT_INJECTION: forcing a failure. [ 794.709994][T29600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.741310][T29600] CPU: 1 PID: 29600 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 794.751876][T29600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.761955][T29600] Call Trace: [ 794.765252][T29600] [ 794.768198][T29600] dump_stack_lvl+0xcd/0x134 [ 794.772813][T29600] should_fail.cold+0x5/0xa [ 794.777445][T29600] _copy_from_user+0x2c/0x180 [ 794.782225][T29600] __copy_msghdr_from_user+0x91/0x4b0 [ 794.787614][T29600] ? __ia32_sys_shutdown+0x70/0x70 [ 794.792731][T29600] ? __lock_acquire+0x1666/0x56c0 [ 794.797780][T29600] ___sys_recvmsg+0xd5/0x200 [ 794.802379][T29600] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 794.808115][T29600] ? find_held_lock+0x2d/0x110 [ 794.812889][T29600] ? __might_fault+0xd1/0x170 [ 794.817575][T29600] ? lock_downgrade+0x6e0/0x6e0 [ 794.822448][T29600] do_recvmmsg+0x24d/0x6d0 [ 794.826877][T29600] ? ___sys_recvmsg+0x200/0x200 [ 794.831754][T29600] ? find_held_lock+0x2d/0x110 [ 794.836616][T29600] ? __context_tracking_exit+0xb9/0xe0 [ 794.842090][T29600] ? lock_downgrade+0x6e0/0x6e0 [ 794.846970][T29600] __x64_sys_recvmmsg+0x20b/0x260 [ 794.852021][T29600] ? __do_sys_socketcall+0x590/0x590 [ 794.857324][T29600] ? syscall_enter_from_user_mode+0x21/0x70 [ 794.863238][T29600] do_syscall_64+0x35/0xb0 [ 794.867748][T29600] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 794.873657][T29600] RIP: 0033:0x7f067a2a6049 [ 794.878073][T29600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 794.897686][T29600] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 12:40:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 77) [ 794.906184][T29600] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 794.914270][T29600] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 794.922254][T29600] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 794.930225][T29600] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 794.938210][T29600] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 794.946299][T29600] [ 795.006198][T29610] FAULT_INJECTION: forcing a failure. [ 795.006198][T29610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.035889][T29610] CPU: 0 PID: 29610 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 795.046449][T29610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.056582][T29610] Call Trace: [ 795.059876][T29610] [ 795.062850][T29610] dump_stack_lvl+0xcd/0x134 [ 795.067472][T29610] should_fail.cold+0x5/0xa [ 795.072009][T29610] _copy_from_user+0x2c/0x180 [ 795.076710][T29610] __copy_msghdr_from_user+0x91/0x4b0 [ 795.082231][T29610] ? __ia32_sys_shutdown+0x70/0x70 [ 795.087355][T29610] ? __lock_acquire+0x1666/0x56c0 [ 795.092392][T29610] ___sys_recvmsg+0xd5/0x200 [ 795.096983][T29610] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 795.102720][T29610] ? find_held_lock+0x2d/0x110 [ 795.107490][T29610] ? __might_fault+0xd1/0x170 [ 795.112229][T29610] ? lock_downgrade+0x6e0/0x6e0 [ 795.117115][T29610] do_recvmmsg+0x24d/0x6d0 [ 795.121547][T29610] ? ___sys_recvmsg+0x200/0x200 [ 795.126405][T29610] ? find_held_lock+0x2d/0x110 [ 795.131174][T29610] ? __context_tracking_exit+0xb9/0xe0 [ 795.136673][T29610] ? lock_downgrade+0x6e0/0x6e0 [ 795.141564][T29610] __x64_sys_recvmmsg+0x20b/0x260 [ 795.146628][T29610] ? __do_sys_socketcall+0x590/0x590 [ 795.151937][T29610] ? syscall_enter_from_user_mode+0x21/0x70 [ 795.157840][T29610] do_syscall_64+0x35/0xb0 [ 795.162400][T29610] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 795.168490][T29610] RIP: 0033:0x7f067a2a6049 [ 795.172921][T29610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 795.192635][T29610] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 12:40:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 78) [ 795.201206][T29610] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 795.209179][T29610] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 795.217153][T29610] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 795.225133][T29610] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 795.233335][T29610] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 795.241347][T29610] [ 795.303104][T29613] FAULT_INJECTION: forcing a failure. [ 795.303104][T29613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.318623][T29613] CPU: 0 PID: 29613 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 795.329380][T29613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.339683][T29613] Call Trace: [ 795.342986][T29613] [ 795.345938][T29613] dump_stack_lvl+0xcd/0x134 [ 795.350566][T29613] should_fail.cold+0x5/0xa [ 795.355107][T29613] _copy_from_user+0x2c/0x180 [ 795.359816][T29613] __copy_msghdr_from_user+0x91/0x4b0 [ 795.365217][T29613] ? __ia32_sys_shutdown+0x70/0x70 [ 795.370362][T29613] ? __lock_acquire+0x1666/0x56c0 [ 795.375411][T29613] ___sys_recvmsg+0xd5/0x200 [ 795.380024][T29613] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 795.385684][T29613] ? find_held_lock+0x2d/0x110 [ 795.390522][T29613] ? __might_fault+0xd1/0x170 [ 795.395230][T29613] ? lock_downgrade+0x6e0/0x6e0 [ 795.400126][T29613] do_recvmmsg+0x24d/0x6d0 [ 795.404571][T29613] ? ___sys_recvmsg+0x200/0x200 [ 795.409470][T29613] ? find_held_lock+0x2d/0x110 [ 795.414352][T29613] ? __context_tracking_exit+0xb9/0xe0 [ 795.419851][T29613] ? lock_downgrade+0x6e0/0x6e0 [ 795.424722][T29613] __x64_sys_recvmmsg+0x20b/0x260 [ 795.429768][T29613] ? __do_sys_socketcall+0x590/0x590 [ 795.435068][T29613] ? syscall_enter_from_user_mode+0x21/0x70 [ 795.440984][T29613] do_syscall_64+0x35/0xb0 [ 795.445438][T29613] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 795.451362][T29613] RIP: 0033:0x7f067a2a6049 [ 795.455802][T29613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 795.475529][T29613] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 795.483955][T29613] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 795.491926][T29613] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 795.499899][T29613] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 795.507871][T29613] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 795.515842][T29613] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 795.523847][T29613] 12:40:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x68000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1200, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x60, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 79) 12:40:27 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0xfffffffffffffeeb) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0xfffffffffffffeeb) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) 12:40:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 795.989225][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801a1e0400: rx timeout, send abort [ 795.998105][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801a1e0400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 796.066551][T29644] FAULT_INJECTION: forcing a failure. [ 796.066551][T29644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.089264][T29644] CPU: 0 PID: 29644 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 796.099847][T29644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.110052][T29644] Call Trace: [ 796.113331][T29644] [ 796.116264][T29644] dump_stack_lvl+0xcd/0x134 [ 796.120881][T29644] should_fail.cold+0x5/0xa [ 796.125394][T29644] _copy_from_user+0x2c/0x180 [ 796.130071][T29644] __copy_msghdr_from_user+0x91/0x4b0 [ 796.135442][T29644] ? __ia32_sys_shutdown+0x70/0x70 [ 796.140782][T29644] ? __lock_acquire+0x1666/0x56c0 [ 796.145829][T29644] ___sys_recvmsg+0xd5/0x200 [ 796.150451][T29644] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 796.156459][T29644] ? find_held_lock+0x2d/0x110 [ 796.161227][T29644] ? __might_fault+0xd1/0x170 [ 796.165908][T29644] ? lock_downgrade+0x6e0/0x6e0 [ 796.170762][T29644] do_recvmmsg+0x24d/0x6d0 [ 796.175178][T29644] ? ___sys_recvmsg+0x200/0x200 [ 796.180030][T29644] ? find_held_lock+0x2d/0x110 [ 796.184798][T29644] ? __context_tracking_exit+0xb9/0xe0 [ 796.190286][T29644] ? lock_downgrade+0x6e0/0x6e0 [ 796.195147][T29644] __x64_sys_recvmmsg+0x20b/0x260 [ 796.200170][T29644] ? __do_sys_socketcall+0x590/0x590 [ 796.205452][T29644] ? syscall_enter_from_user_mode+0x21/0x70 [ 796.211440][T29644] do_syscall_64+0x35/0xb0 [ 796.215883][T29644] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 796.221777][T29644] RIP: 0033:0x7f067a2a6049 [ 796.226181][T29644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 796.246098][T29644] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 796.254531][T29644] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 12:40:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6c000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x68, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 796.262529][T29644] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 796.270615][T29644] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 796.278600][T29644] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 796.286572][T29644] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 796.294573][T29644] 12:40:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1400, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 80) [ 796.402537][T29661] FAULT_INJECTION: forcing a failure. [ 796.402537][T29661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.421436][T29661] CPU: 1 PID: 29661 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 796.431991][T29661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.442073][T29661] Call Trace: [ 796.445378][T29661] [ 796.448321][T29661] dump_stack_lvl+0xcd/0x134 [ 796.452950][T29661] should_fail.cold+0x5/0xa [ 796.457495][T29661] _copy_from_user+0x2c/0x180 [ 796.462210][T29661] __copy_msghdr_from_user+0x91/0x4b0 [ 796.467616][T29661] ? __ia32_sys_shutdown+0x70/0x70 [ 796.472759][T29661] ? __lock_acquire+0x1666/0x56c0 [ 796.477838][T29661] ___sys_recvmsg+0xd5/0x200 [ 796.482450][T29661] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 796.488102][T29661] ? find_held_lock+0x2d/0x110 [ 796.492898][T29661] ? __might_fault+0xd1/0x170 [ 796.497597][T29661] ? lock_downgrade+0x6e0/0x6e0 [ 796.502462][T29661] do_recvmmsg+0x24d/0x6d0 [ 796.506890][T29661] ? ___sys_recvmsg+0x200/0x200 [ 796.511780][T29661] ? find_held_lock+0x2d/0x110 [ 796.516579][T29661] ? __context_tracking_exit+0xb9/0xe0 [ 796.522087][T29661] ? lock_downgrade+0x6e0/0x6e0 [ 796.526977][T29661] __x64_sys_recvmmsg+0x20b/0x260 [ 796.532042][T29661] ? __do_sys_socketcall+0x590/0x590 [ 796.537363][T29661] ? syscall_enter_from_user_mode+0x21/0x70 [ 796.543423][T29661] do_syscall_64+0x35/0xb0 [ 796.547877][T29661] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 796.554073][T29661] RIP: 0033:0x7f067a2a6049 [ 796.558524][T29661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 796.578482][T29661] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 796.586902][T29661] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 796.594925][T29661] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:40:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 81) [ 796.602919][T29661] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 796.610905][T29661] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 796.618888][T29661] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 796.626883][T29661] [ 796.714750][T29658] __nla_validate_parse: 30 callbacks suppressed [ 796.714773][T29658] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 796.735398][T29662] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 796.795528][T29670] FAULT_INJECTION: forcing a failure. [ 796.795528][T29670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.813870][T29642] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 796.836836][T29670] CPU: 0 PID: 29670 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 796.847439][T29670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.857525][T29670] Call Trace: [ 796.860822][T29670] [ 796.863774][T29670] dump_stack_lvl+0xcd/0x134 [ 796.868408][T29670] should_fail.cold+0x5/0xa [ 796.872952][T29670] _copy_from_user+0x2c/0x180 [ 796.877662][T29670] __copy_msghdr_from_user+0x91/0x4b0 [ 796.883066][T29670] ? __ia32_sys_shutdown+0x70/0x70 [ 796.888206][T29670] ? __lock_acquire+0x1666/0x56c0 [ 796.893280][T29670] ___sys_recvmsg+0xd5/0x200 [ 796.897035][T29656] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 796.897894][T29670] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 796.897943][T29670] ? find_held_lock+0x2d/0x110 [ 796.897979][T29670] ? __might_fault+0xd1/0x170 [ 796.922437][T29670] ? lock_downgrade+0x6e0/0x6e0 [ 796.927340][T29670] do_recvmmsg+0x24d/0x6d0 [ 796.931784][T29670] ? ___sys_recvmsg+0x200/0x200 [ 796.936672][T29670] ? find_held_lock+0x2d/0x110 [ 796.941489][T29670] ? __context_tracking_exit+0xb9/0xe0 [ 796.947069][T29670] ? lock_downgrade+0x6e0/0x6e0 [ 796.951957][T29670] __x64_sys_recvmmsg+0x20b/0x260 [ 796.957098][T29670] ? __do_sys_socketcall+0x590/0x590 [ 796.962414][T29670] ? syscall_enter_from_user_mode+0x21/0x70 [ 796.966516][T29658] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 796.968338][T29670] do_syscall_64+0x35/0xb0 [ 796.968369][T29670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 796.987933][T29670] RIP: 0033:0x7f067a2a6049 [ 796.992366][T29670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 797.012109][T29662] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 797.012181][T29670] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 797.029959][T29670] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 797.038043][T29670] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:40:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 82) [ 797.046209][T29670] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 797.054206][T29670] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 797.062202][T29670] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 797.070247][T29670] 12:40:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1600, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x74000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6c, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 797.158861][T29679] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 797.172982][T29678] FAULT_INJECTION: forcing a failure. [ 797.172982][T29678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.189331][T29678] CPU: 0 PID: 29678 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 797.199977][T29678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.210040][T29678] Call Trace: [ 797.213322][T29678] [ 797.216250][T29678] dump_stack_lvl+0xcd/0x134 [ 797.220849][T29678] should_fail.cold+0x5/0xa [ 797.225359][T29678] _copy_from_user+0x2c/0x180 [ 797.230043][T29678] __copy_msghdr_from_user+0x91/0x4b0 [ 797.235594][T29678] ? __ia32_sys_shutdown+0x70/0x70 [ 797.240704][T29678] ? __lock_acquire+0x1666/0x56c0 [ 797.246182][T29678] ___sys_recvmsg+0xd5/0x200 [ 797.250886][T29678] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 797.256532][T29678] ? find_held_lock+0x2d/0x110 [ 797.261304][T29678] ? __might_fault+0xd1/0x170 [ 797.265989][T29678] ? lock_downgrade+0x6e0/0x6e0 [ 797.270858][T29678] do_recvmmsg+0x24d/0x6d0 [ 797.275544][T29678] ? ___sys_recvmsg+0x200/0x200 [ 797.280410][T29678] ? find_held_lock+0x2d/0x110 [ 797.285186][T29678] ? __context_tracking_exit+0xb9/0xe0 [ 797.290677][T29678] ? lock_downgrade+0x6e0/0x6e0 [ 797.295807][T29678] __x64_sys_recvmmsg+0x20b/0x260 [ 797.300841][T29678] ? __do_sys_socketcall+0x590/0x590 [ 797.306140][T29678] ? syscall_enter_from_user_mode+0x21/0x70 [ 797.312062][T29678] do_syscall_64+0x35/0xb0 [ 797.316564][T29678] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 797.322478][T29678] RIP: 0033:0x7f067a2a6049 [ 797.327091][T29678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 797.346787][T29678] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 797.355220][T29678] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 797.363365][T29678] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 797.371432][T29678] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 797.379583][T29678] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 797.387551][T29678] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 797.395535][T29678] [ 797.399075][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806afa3800: rx timeout, send abort 12:40:28 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0xfffffffffffffeeb) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 797.409409][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806afa3800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 797.418818][T29683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 797.437933][T29685] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 797.451025][T29684] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 83) [ 797.514265][T29691] FAULT_INJECTION: forcing a failure. [ 797.514265][T29691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.528110][T29691] CPU: 0 PID: 29691 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 797.538657][T29691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.548820][T29691] Call Trace: [ 797.552119][T29691] [ 797.555069][T29691] dump_stack_lvl+0xcd/0x134 [ 797.559809][T29691] should_fail.cold+0x5/0xa [ 797.564321][T29691] _copy_from_user+0x2c/0x180 [ 797.569000][T29691] __copy_msghdr_from_user+0x91/0x4b0 [ 797.574386][T29691] ? __ia32_sys_shutdown+0x70/0x70 [ 797.579514][T29691] ? __lock_acquire+0x1666/0x56c0 [ 797.584552][T29691] ___sys_recvmsg+0xd5/0x200 [ 797.589175][T29691] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 797.594841][T29691] ? find_held_lock+0x2d/0x110 [ 797.599633][T29691] ? __might_fault+0xd1/0x170 [ 797.604317][T29691] ? lock_downgrade+0x6e0/0x6e0 [ 797.609276][T29691] do_recvmmsg+0x24d/0x6d0 [ 797.613710][T29691] ? ___sys_recvmsg+0x200/0x200 [ 797.618565][T29691] ? find_held_lock+0x2d/0x110 [ 797.623562][T29691] ? __context_tracking_exit+0xb9/0xe0 [ 797.629056][T29691] ? lock_downgrade+0x6e0/0x6e0 [ 797.633924][T29691] __x64_sys_recvmmsg+0x20b/0x260 [ 797.638973][T29691] ? __do_sys_socketcall+0x590/0x590 [ 797.644263][T29691] ? syscall_enter_from_user_mode+0x21/0x70 [ 797.650279][T29691] do_syscall_64+0x35/0xb0 [ 797.654721][T29691] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 797.660638][T29691] RIP: 0033:0x7f067a2a6049 [ 797.665051][T29691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 797.684655][T29691] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 797.693058][T29691] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 797.701021][T29691] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 797.708983][T29691] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 797.716969][T29691] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 797.724950][T29691] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 797.732922][T29691] 12:40:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 84) [ 797.875779][T29699] FAULT_INJECTION: forcing a failure. [ 797.875779][T29699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.907264][T29699] CPU: 1 PID: 29699 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 797.917822][T29699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.927900][T29699] Call Trace: [ 797.931345][T29699] [ 797.934295][T29699] dump_stack_lvl+0xcd/0x134 [ 797.938914][T29699] should_fail.cold+0x5/0xa [ 797.943462][T29699] _copy_from_user+0x2c/0x180 [ 797.948174][T29699] __copy_msghdr_from_user+0x91/0x4b0 [ 797.953582][T29699] ? __ia32_sys_shutdown+0x70/0x70 [ 797.958725][T29699] ? __lock_acquire+0x1666/0x56c0 [ 797.963803][T29699] ___sys_recvmsg+0xd5/0x200 [ 797.968430][T29699] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 797.974139][T29699] ? find_held_lock+0x2d/0x110 [ 797.978934][T29699] ? __might_fault+0xd1/0x170 [ 797.983615][T29699] ? lock_downgrade+0x6e0/0x6e0 [ 797.988474][T29699] do_recvmmsg+0x24d/0x6d0 [ 797.993309][T29699] ? ___sys_recvmsg+0x200/0x200 [ 797.998165][T29699] ? find_held_lock+0x2d/0x110 [ 798.002928][T29699] ? __context_tracking_exit+0xb9/0xe0 [ 798.009319][T29699] ? lock_downgrade+0x6e0/0x6e0 [ 798.014197][T29699] __x64_sys_recvmmsg+0x20b/0x260 [ 798.019238][T29699] ? __do_sys_socketcall+0x590/0x590 [ 798.024530][T29699] ? syscall_enter_from_user_mode+0x21/0x70 [ 798.030570][T29699] do_syscall_64+0x35/0xb0 [ 798.034985][T29699] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 798.040898][T29699] RIP: 0033:0x7f067a2a6049 [ 798.046357][T29699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 798.065971][T29699] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 798.074379][T29699] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 798.082517][T29699] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 798.090519][T29699] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 798.098588][T29699] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 798.106557][T29699] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 798.114530][T29699] 12:40:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 85) 12:40:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7a000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x74, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 798.257595][T29710] FAULT_INJECTION: forcing a failure. [ 798.257595][T29710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.272111][T29710] CPU: 1 PID: 29710 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 798.282647][T29710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.292754][T29710] Call Trace: [ 798.296222][T29710] [ 798.299158][T29710] dump_stack_lvl+0xcd/0x134 [ 798.303771][T29710] should_fail.cold+0x5/0xa [ 798.308310][T29710] _copy_from_user+0x2c/0x180 [ 798.313029][T29710] __copy_msghdr_from_user+0x91/0x4b0 [ 798.318427][T29710] ? __ia32_sys_shutdown+0x70/0x70 [ 798.323570][T29710] ? __lock_acquire+0x1666/0x56c0 [ 798.328631][T29710] ___sys_recvmsg+0xd5/0x200 [ 798.333572][T29710] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 798.339241][T29710] ? find_held_lock+0x2d/0x110 [ 798.344029][T29710] ? __might_fault+0xd1/0x170 [ 798.348725][T29710] ? lock_downgrade+0x6e0/0x6e0 [ 798.353607][T29710] do_recvmmsg+0x24d/0x6d0 [ 798.358049][T29710] ? ___sys_recvmsg+0x200/0x200 [ 798.362916][T29710] ? find_held_lock+0x2d/0x110 [ 798.367708][T29710] ? __context_tracking_exit+0xb9/0xe0 [ 798.373179][T29710] ? lock_downgrade+0x6e0/0x6e0 [ 798.378039][T29710] __x64_sys_recvmmsg+0x20b/0x260 [ 798.383070][T29710] ? __do_sys_socketcall+0x590/0x590 [ 798.388364][T29710] ? syscall_enter_from_user_mode+0x21/0x70 [ 798.394272][T29710] do_syscall_64+0x35/0xb0 [ 798.398693][T29710] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 798.404612][T29710] RIP: 0033:0x7f067a2a6049 [ 798.409026][T29710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 798.428657][T29710] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 798.437073][T29710] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 798.445047][T29710] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 12:40:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 86) [ 798.453025][T29710] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 798.460995][T29710] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 798.468967][T29710] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 798.476974][T29710] 12:40:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1800, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 798.531375][T29715] FAULT_INJECTION: forcing a failure. [ 798.531375][T29715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.547564][T29715] CPU: 1 PID: 29715 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 798.558115][T29715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.572623][T29715] Call Trace: [ 798.575918][T29715] [ 798.578865][T29715] dump_stack_lvl+0xcd/0x134 [ 798.583482][T29715] should_fail.cold+0x5/0xa [ 798.588023][T29715] _copy_from_user+0x2c/0x180 [ 798.592741][T29715] __copy_msghdr_from_user+0x91/0x4b0 [ 798.598153][T29715] ? __ia32_sys_shutdown+0x70/0x70 [ 798.603294][T29715] ? __lock_acquire+0x1666/0x56c0 [ 798.608455][T29715] ___sys_recvmsg+0xd5/0x200 [ 798.613076][T29715] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 798.618751][T29715] ? find_held_lock+0x2d/0x110 [ 798.623541][T29715] ? __might_fault+0xd1/0x170 [ 798.628251][T29715] ? lock_downgrade+0x6e0/0x6e0 [ 798.633143][T29715] do_recvmmsg+0x24d/0x6d0 [ 798.637587][T29715] ? ___sys_recvmsg+0x200/0x200 [ 798.642467][T29715] ? find_held_lock+0x2d/0x110 [ 798.647257][T29715] ? __context_tracking_exit+0xb9/0xe0 [ 798.652740][T29715] ? lock_downgrade+0x6e0/0x6e0 [ 798.657605][T29715] __x64_sys_recvmmsg+0x20b/0x260 [ 798.662660][T29715] ? __do_sys_socketcall+0x590/0x590 [ 798.668052][T29715] ? syscall_enter_from_user_mode+0x21/0x70 [ 798.674051][T29715] do_syscall_64+0x35/0xb0 [ 798.678504][T29715] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 798.684428][T29715] RIP: 0033:0x7f067a2a6049 [ 798.688959][T29715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 798.708589][T29715] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 798.717011][T29715] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 12:40:29 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r3, 0x1, {0x2, 0xf0, 0x1}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x81) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000100000000eb736800000000000000000000005f361e456235ea64ad2747788f72209d23f16268d96ed275664e669bfe6b64c6fa7ae8c78f733037208ab493fb4443484da720ad83d7ff240bc56f1ef11bf1325cea46d5020807ecd4ea552496dc4e14237796b50cf23b2df1d52269f1c98d0006cd9d0c94cf873a962951b1f0860f65e846b7650037b29ece5ace81240aa37c42fa5751e669ec142861beb3ea07444282eb3711bcef5371db66c6e47c8ee155a47f3850"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}]}}]}, 0x44}}, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r6, 0x2, {0x2, 0x1, 0x3}, 0xfe}, 0x18) 12:40:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 87) [ 798.724999][T29715] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 798.732850][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801c9ee800: rx timeout, send abort [ 798.732980][T29715] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 798.741422][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801c9ee800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 798.749093][T29715] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 798.749113][T29715] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 798.749146][T29715] [ 798.901407][T29725] FAULT_INJECTION: forcing a failure. [ 798.901407][T29725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.960977][T29725] CPU: 0 PID: 29725 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 798.971621][T29725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.982130][T29725] Call Trace: [ 798.985419][T29725] [ 798.988353][T29725] dump_stack_lvl+0xcd/0x134 [ 798.992965][T29725] should_fail.cold+0x5/0xa [ 798.997487][T29725] _copy_from_user+0x2c/0x180 [ 799.002175][T29725] __copy_msghdr_from_user+0x91/0x4b0 [ 799.007643][T29725] ? __ia32_sys_shutdown+0x70/0x70 [ 799.012773][T29725] ? __lock_acquire+0x1666/0x56c0 [ 799.018089][T29725] ___sys_recvmsg+0xd5/0x200 [ 799.022686][T29725] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 799.028345][T29725] ? find_held_lock+0x2d/0x110 [ 799.033116][T29725] ? __might_fault+0xd1/0x170 [ 799.037901][T29725] ? lock_downgrade+0x6e0/0x6e0 [ 799.042774][T29725] do_recvmmsg+0x24d/0x6d0 [ 799.047205][T29725] ? ___sys_recvmsg+0x200/0x200 [ 799.052077][T29725] ? find_held_lock+0x2d/0x110 [ 799.056853][T29725] ? __context_tracking_exit+0xb9/0xe0 [ 799.062329][T29725] ? lock_downgrade+0x6e0/0x6e0 [ 799.067888][T29725] __x64_sys_recvmmsg+0x20b/0x260 [ 799.073014][T29725] ? __do_sys_socketcall+0x590/0x590 [ 799.078311][T29725] ? syscall_enter_from_user_mode+0x21/0x70 [ 799.084220][T29725] do_syscall_64+0x35/0xb0 [ 799.088642][T29725] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 799.094546][T29725] RIP: 0033:0x7f067a2a6049 [ 799.098979][T29725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 799.118958][T29725] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 799.127471][T29725] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 799.135527][T29725] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 799.143495][T29725] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 799.151652][T29725] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 12:40:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x801b0000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x7a, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 799.159631][T29725] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 799.167618][T29725] 12:40:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 88) [ 799.370265][T29742] FAULT_INJECTION: forcing a failure. [ 799.370265][T29742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.406205][T29742] CPU: 0 PID: 29742 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 799.416773][T29742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.426843][T29742] Call Trace: [ 799.430121][T29742] [ 799.433105][T29742] dump_stack_lvl+0xcd/0x134 [ 799.437702][T29742] should_fail.cold+0x5/0xa [ 799.442215][T29742] _copy_from_user+0x2c/0x180 [ 799.446907][T29742] __copy_msghdr_from_user+0x91/0x4b0 [ 799.452286][T29742] ? __ia32_sys_shutdown+0x70/0x70 [ 799.457407][T29742] ? __lock_acquire+0x1666/0x56c0 [ 799.462442][T29742] ___sys_recvmsg+0xd5/0x200 [ 799.467037][T29742] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 799.472697][T29742] ? find_held_lock+0x2d/0x110 [ 799.477466][T29742] ? __might_fault+0xd1/0x170 [ 799.482161][T29742] ? lock_downgrade+0x6e0/0x6e0 [ 799.487044][T29742] do_recvmmsg+0x24d/0x6d0 [ 799.491478][T29742] ? ___sys_recvmsg+0x200/0x200 [ 799.496335][T29742] ? find_held_lock+0x2d/0x110 [ 799.501099][T29742] ? __context_tracking_exit+0xb9/0xe0 [ 799.506555][T29742] ? lock_downgrade+0x6e0/0x6e0 [ 799.511412][T29742] __x64_sys_recvmmsg+0x20b/0x260 [ 799.516432][T29742] ? __do_sys_socketcall+0x590/0x590 [ 799.521714][T29742] ? syscall_enter_from_user_mode+0x21/0x70 [ 799.527613][T29742] do_syscall_64+0x35/0xb0 [ 799.532039][T29742] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 799.537925][T29742] RIP: 0033:0x7f067a2a6049 [ 799.542336][T29742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 799.561941][T29742] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 12:40:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1900, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 799.570353][T29742] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 799.578354][T29742] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 799.586321][T29742] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 799.594306][T29742] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 799.602272][T29742] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 799.610263][T29742] 12:40:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 89) [ 799.723318][T29752] FAULT_INJECTION: forcing a failure. [ 799.723318][T29752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.774093][T29752] CPU: 1 PID: 29752 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 799.784646][T29752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.794719][T29752] Call Trace: [ 799.798003][T29752] [ 799.800943][T29752] dump_stack_lvl+0xcd/0x134 [ 799.805551][T29752] should_fail.cold+0x5/0xa [ 799.810086][T29752] _copy_from_user+0x2c/0x180 [ 799.814770][T29752] __copy_msghdr_from_user+0x91/0x4b0 [ 799.820156][T29752] ? __ia32_sys_shutdown+0x70/0x70 [ 799.825279][T29752] ? __lock_acquire+0x1666/0x56c0 [ 799.830342][T29752] ___sys_recvmsg+0xd5/0x200 [ 799.834956][T29752] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 799.840619][T29752] ? find_held_lock+0x2d/0x110 [ 799.845417][T29752] ? __might_fault+0xd1/0x170 [ 799.850117][T29752] ? lock_downgrade+0x6e0/0x6e0 [ 799.855080][T29752] do_recvmmsg+0x24d/0x6d0 [ 799.859531][T29752] ? ___sys_recvmsg+0x200/0x200 [ 799.864399][T29752] ? find_held_lock+0x2d/0x110 [ 799.869174][T29752] ? __context_tracking_exit+0xb9/0xe0 [ 799.874735][T29752] ? lock_downgrade+0x6e0/0x6e0 [ 799.879635][T29752] __x64_sys_recvmmsg+0x20b/0x260 [ 799.884683][T29752] ? __do_sys_socketcall+0x590/0x590 [ 799.889980][T29752] ? syscall_enter_from_user_mode+0x21/0x70 [ 799.896059][T29752] do_syscall_64+0x35/0xb0 [ 799.900653][T29752] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 799.906696][T29752] RIP: 0033:0x7f067a2a6049 [ 799.911136][T29752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 799.930767][T29752] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 799.939457][T29752] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 799.947424][T29752] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 799.955402][T29752] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 799.963386][T29752] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 799.971362][T29752] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 799.979457][T29752] 12:40:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x94000000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 90) 12:40:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 800.111517][T29759] FAULT_INJECTION: forcing a failure. [ 800.111517][T29759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.126447][T29759] CPU: 1 PID: 29759 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 800.136993][T29759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.146752][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806e1b5400: rx timeout, send abort [ 800.147059][T29759] Call Trace: [ 800.147071][T29759] [ 800.155581][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806e1b5400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 800.158494][T29759] dump_stack_lvl+0xcd/0x134 [ 800.158530][T29759] should_fail.cold+0x5/0xa [ 800.161563][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880137fcc00: rx timeout, send abort [ 800.175840][T29759] _copy_from_user+0x2c/0x180 [ 800.175874][T29759] __copy_msghdr_from_user+0x91/0x4b0 [ 800.175904][T29759] ? __ia32_sys_shutdown+0x70/0x70 [ 800.209003][T29759] ? __lock_acquire+0x1666/0x56c0 [ 800.214070][T29759] ___sys_recvmsg+0xd5/0x200 [ 800.214299][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880137fcc00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 800.218678][T29759] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 800.218722][T29759] ? find_held_lock+0x2d/0x110 [ 800.243338][T29759] ? __might_fault+0xd1/0x170 [ 800.248040][T29759] ? lock_downgrade+0x6e0/0x6e0 [ 800.252935][T29759] do_recvmmsg+0x24d/0x6d0 [ 800.257387][T29759] ? ___sys_recvmsg+0x200/0x200 [ 800.262269][T29759] ? find_held_lock+0x2d/0x110 [ 800.267066][T29759] ? __context_tracking_exit+0xb9/0xe0 [ 800.272559][T29759] ? lock_downgrade+0x6e0/0x6e0 [ 800.277436][T29759] __x64_sys_recvmmsg+0x20b/0x260 [ 800.282489][T29759] ? __do_sys_socketcall+0x590/0x590 [ 800.287794][T29759] ? syscall_enter_from_user_mode+0x21/0x70 [ 800.293711][T29759] do_syscall_64+0x35/0xb0 [ 800.298145][T29759] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 800.304048][T29759] RIP: 0033:0x7f067a2a6049 [ 800.308469][T29759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 800.328098][T29759] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 800.336538][T29759] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 800.344517][T29759] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 800.352513][T29759] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 12:40:31 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r3, 0x1, {0x2, 0xf0, 0x1}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x81) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000100000000eb736800000000000000000000005f361e456235ea64ad2747788f72209d23f16268d96ed275664e669bfe6b64c6fa7ae8c78f733037208ab493fb4443484da720ad83d7ff240bc56f1ef11bf1325cea46d5020807ecd4ea552496dc4e14237796b50cf23b2df1d52269f1c98d0006cd9d0c94cf873a962951b1f0860f65e846b7650037b29ece5ace81240aa37c42fa5751e669ec142861beb3ea07444282eb3711bcef5371db66c6e47c8ee155a47f3850"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}]}}]}, 0x44}}, 0x0) (async) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r6, 0x2, {0x2, 0x1, 0x3}, 0xfe}, 0x18) [ 800.360490][T29759] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 800.368492][T29759] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 800.376490][T29759] 12:40:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x94, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 91) 12:40:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1f00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 800.506531][T29773] FAULT_INJECTION: forcing a failure. [ 800.506531][T29773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.532992][T29773] CPU: 1 PID: 29773 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 800.543552][T29773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.553629][T29773] Call Trace: [ 800.556924][T29773] [ 800.559869][T29773] dump_stack_lvl+0xcd/0x134 [ 800.564483][T29773] should_fail.cold+0x5/0xa [ 800.569025][T29773] _copy_from_user+0x2c/0x180 [ 800.573910][T29773] __copy_msghdr_from_user+0x91/0x4b0 [ 800.579319][T29773] ? __ia32_sys_shutdown+0x70/0x70 [ 800.584458][T29773] ? __lock_acquire+0x1666/0x56c0 [ 800.589532][T29773] ___sys_recvmsg+0xd5/0x200 [ 800.594155][T29773] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 800.599826][T29773] ? find_held_lock+0x2d/0x110 [ 800.604729][T29773] ? __might_fault+0xd1/0x170 [ 800.609424][T29773] ? lock_downgrade+0x6e0/0x6e0 [ 800.614300][T29773] do_recvmmsg+0x24d/0x6d0 [ 800.618728][T29773] ? ___sys_recvmsg+0x200/0x200 [ 800.623858][T29773] ? find_held_lock+0x2d/0x110 [ 800.628656][T29773] ? __context_tracking_exit+0xb9/0xe0 [ 800.634132][T29773] ? lock_downgrade+0x6e0/0x6e0 [ 800.639017][T29773] __x64_sys_recvmmsg+0x20b/0x260 [ 800.644068][T29773] ? __do_sys_socketcall+0x590/0x590 [ 800.649367][T29773] ? syscall_enter_from_user_mode+0x21/0x70 [ 800.655278][T29773] do_syscall_64+0x35/0xb0 [ 800.659697][T29773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 800.665599][T29773] RIP: 0033:0x7f067a2a6049 [ 800.670018][T29773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 800.689630][T29773] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 800.698048][T29773] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 12:40:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 92) [ 800.706020][T29773] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 800.713993][T29773] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 800.721964][T29773] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 800.729939][T29773] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 800.737953][T29773] 12:40:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x9effffff, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 800.829192][T29782] FAULT_INJECTION: forcing a failure. [ 800.829192][T29782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.850456][T29782] CPU: 1 PID: 29782 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 800.861012][T29782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.871093][T29782] Call Trace: [ 800.874386][T29782] [ 800.877337][T29782] dump_stack_lvl+0xcd/0x134 [ 800.881952][T29782] should_fail.cold+0x5/0xa [ 800.886489][T29782] _copy_from_user+0x2c/0x180 [ 800.891210][T29782] __copy_msghdr_from_user+0x91/0x4b0 [ 800.896617][T29782] ? __ia32_sys_shutdown+0x70/0x70 [ 800.901759][T29782] ? __lock_acquire+0x1666/0x56c0 [ 800.906832][T29782] ___sys_recvmsg+0xd5/0x200 [ 800.911451][T29782] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 800.917116][T29782] ? find_held_lock+0x2d/0x110 [ 800.921909][T29782] ? __might_fault+0xd1/0x170 [ 800.926602][T29782] ? lock_downgrade+0x6e0/0x6e0 [ 800.931491][T29782] do_recvmmsg+0x24d/0x6d0 [ 800.935932][T29782] ? ___sys_recvmsg+0x200/0x200 [ 800.941011][T29782] ? find_held_lock+0x2d/0x110 [ 800.945794][T29782] ? __context_tracking_exit+0xb9/0xe0 [ 800.951284][T29782] ? lock_downgrade+0x6e0/0x6e0 [ 800.956143][T29782] __x64_sys_recvmmsg+0x20b/0x260 [ 800.961194][T29782] ? __do_sys_socketcall+0x590/0x590 [ 800.966501][T29782] ? syscall_enter_from_user_mode+0x21/0x70 [ 800.972510][T29782] do_syscall_64+0x35/0xb0 [ 800.976923][T29782] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 800.982817][T29782] RIP: 0033:0x7f067a2a6049 [ 800.987243][T29782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 801.006855][T29782] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 801.015288][T29782] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 801.023256][T29782] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 801.031241][T29782] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 801.039228][T29782] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 801.047192][T29782] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 801.055302][T29782] 12:40:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 93) [ 801.198438][T29793] FAULT_INJECTION: forcing a failure. [ 801.198438][T29793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.216292][T29793] CPU: 1 PID: 29793 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 801.226931][T29793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.237005][T29793] Call Trace: [ 801.240296][T29793] [ 801.243239][T29793] dump_stack_lvl+0xcd/0x134 [ 801.247859][T29793] should_fail.cold+0x5/0xa [ 801.252405][T29793] _copy_from_user+0x2c/0x180 [ 801.257109][T29793] __copy_msghdr_from_user+0x91/0x4b0 [ 801.262514][T29793] ? __ia32_sys_shutdown+0x70/0x70 [ 801.267654][T29793] ? __lock_acquire+0x1666/0x56c0 [ 801.272732][T29793] ___sys_recvmsg+0xd5/0x200 [ 801.277348][T29793] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 801.283019][T29793] ? find_held_lock+0x2d/0x110 [ 801.287831][T29793] ? __might_fault+0xd1/0x170 [ 801.292529][T29793] ? lock_downgrade+0x6e0/0x6e0 [ 801.297407][T29793] do_recvmmsg+0x24d/0x6d0 [ 801.301928][T29793] ? ___sys_recvmsg+0x200/0x200 [ 801.306798][T29793] ? find_held_lock+0x2d/0x110 [ 801.311577][T29793] ? __context_tracking_exit+0xb9/0xe0 [ 801.317057][T29793] ? lock_downgrade+0x6e0/0x6e0 [ 801.321928][T29793] __x64_sys_recvmmsg+0x20b/0x260 [ 801.326972][T29793] ? __do_sys_socketcall+0x590/0x590 [ 801.332442][T29793] ? syscall_enter_from_user_mode+0x21/0x70 [ 801.338353][T29793] do_syscall_64+0x35/0xb0 [ 801.342794][T29793] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 801.348702][T29793] RIP: 0033:0x7f067a2a6049 [ 801.353137][T29793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 801.372750][T29793] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 801.381172][T29793] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 801.389144][T29793] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 801.397114][T29793] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 801.405090][T29793] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 801.413059][T29793] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 801.421245][T29793] 12:40:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x1f09, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xf0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 94) [ 801.550719][T29804] FAULT_INJECTION: forcing a failure. [ 801.550719][T29804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.564511][T29804] CPU: 0 PID: 29804 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 801.575044][T29804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.585185][T29804] Call Trace: [ 801.588505][T29804] [ 801.591450][T29804] dump_stack_lvl+0xcd/0x134 [ 801.596065][T29804] should_fail.cold+0x5/0xa [ 801.600607][T29804] _copy_from_user+0x2c/0x180 [ 801.605316][T29804] __copy_msghdr_from_user+0x91/0x4b0 [ 801.610726][T29804] ? __ia32_sys_shutdown+0x70/0x70 [ 801.615865][T29804] ? __lock_acquire+0x1666/0x56c0 [ 801.620971][T29804] ___sys_recvmsg+0xd5/0x200 [ 801.625590][T29804] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 801.631256][T29804] ? find_held_lock+0x2d/0x110 [ 801.636063][T29804] ? __might_fault+0xd1/0x170 [ 801.640782][T29804] ? lock_downgrade+0x6e0/0x6e0 [ 801.645794][T29804] do_recvmmsg+0x24d/0x6d0 [ 801.650254][T29804] ? ___sys_recvmsg+0x200/0x200 [ 801.655151][T29804] ? find_held_lock+0x2d/0x110 [ 801.659957][T29804] ? __context_tracking_exit+0xb9/0xe0 [ 801.665417][T29804] ? lock_downgrade+0x6e0/0x6e0 [ 801.670276][T29804] __x64_sys_recvmmsg+0x20b/0x260 [ 801.675339][T29804] ? __do_sys_socketcall+0x590/0x590 [ 801.680642][T29804] ? syscall_enter_from_user_mode+0x21/0x70 [ 801.686550][T29804] do_syscall_64+0x35/0xb0 [ 801.690978][T29804] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 801.696897][T29804] RIP: 0033:0x7f067a2a6049 [ 801.701329][T29804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 801.720958][T29804] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 801.729390][T29804] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 801.737362][T29804] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 801.745329][T29804] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 801.753465][T29804] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 801.761758][T29804] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 801.769773][T29804] [ 801.774035][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ef47c00: rx timeout, send abort [ 801.782294][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ef46000: rx timeout, send abort 12:40:32 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) (async) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r3, 0x1, {0x2, 0xf0, 0x1}, 0xfd}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x81) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) (async, rerun: 64) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000100000000eb736800000000000000000000005f361e456235ea64ad2747788f72209d23f16268d96ed275664e669bfe6b64c6fa7ae8c78f733037208ab493fb4443484da720ad83d7ff240bc56f1ef11bf1325cea46d5020807ecd4ea552496dc4e14237796b50cf23b2df1d52269f1c98d0006cd9d0c94cf873a962951b1f0860f65e846b7650037b29ece5ace81240aa37c42fa5751e669ec142861beb3ea07444282eb3711bcef5371db66c6e47c8ee155a47f3850"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}]}}]}, 0x44}}, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r6, 0x2, {0x2, 0x1, 0x3}, 0xfe}, 0x18) 12:40:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 95) [ 801.791120][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806ef47c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 801.805589][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806ef46000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xf0ffffff, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 801.953030][T29818] __nla_validate_parse: 51 callbacks suppressed [ 801.953051][T29818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 801.953340][T29817] FAULT_INJECTION: forcing a failure. [ 801.953340][T29817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.988189][T29820] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 801.993073][T29803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 802.056817][T29798] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 802.070078][T29818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 802.081288][T29817] CPU: 0 PID: 29817 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 802.091865][T29817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.101931][T29817] Call Trace: [ 802.105236][T29817] [ 802.108261][T29817] dump_stack_lvl+0xcd/0x134 [ 802.112862][T29817] should_fail.cold+0x5/0xa [ 802.117383][T29817] _copy_from_user+0x2c/0x180 [ 802.122074][T29817] __copy_msghdr_from_user+0x91/0x4b0 [ 802.127468][T29817] ? __ia32_sys_shutdown+0x70/0x70 [ 802.132611][T29817] ? __lock_acquire+0x1666/0x56c0 [ 802.137665][T29817] ___sys_recvmsg+0xd5/0x200 [ 802.142281][T29817] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 802.147939][T29817] ? find_held_lock+0x2d/0x110 [ 802.152741][T29817] ? __might_fault+0xd1/0x170 [ 802.157434][T29817] ? lock_downgrade+0x6e0/0x6e0 [ 802.162313][T29817] do_recvmmsg+0x24d/0x6d0 [ 802.166748][T29817] ? ___sys_recvmsg+0x200/0x200 [ 802.171634][T29817] ? find_held_lock+0x2d/0x110 [ 802.176409][T29817] ? __context_tracking_exit+0xb9/0xe0 [ 802.181891][T29817] ? lock_downgrade+0x6e0/0x6e0 [ 802.186758][T29817] __x64_sys_recvmmsg+0x20b/0x260 [ 802.191793][T29817] ? __do_sys_socketcall+0x590/0x590 [ 802.197094][T29817] ? syscall_enter_from_user_mode+0x21/0x70 [ 802.203017][T29817] do_syscall_64+0x35/0xb0 [ 802.207454][T29817] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 802.213368][T29817] RIP: 0033:0x7f067a2a6049 [ 802.217791][T29817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 802.237414][T29817] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 802.245851][T29817] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 802.253839][T29817] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 802.261833][T29817] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 802.269934][T29817] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 802.277950][T29817] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 802.285956][T29817] [ 802.310424][T29820] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:40:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4800, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x300, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 96) [ 802.460891][T29830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 802.471010][T29818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 802.490934][T29832] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xf5ffffff, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 802.548652][T29820] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 802.548982][T29835] FAULT_INJECTION: forcing a failure. [ 802.548982][T29835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.575176][T29835] CPU: 1 PID: 29835 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 802.585720][T29835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.595818][T29835] Call Trace: [ 802.599103][T29835] [ 802.602031][T29835] dump_stack_lvl+0xcd/0x134 [ 802.606667][T29835] should_fail.cold+0x5/0xa [ 802.611200][T29835] _copy_from_user+0x2c/0x180 [ 802.615902][T29835] __copy_msghdr_from_user+0x91/0x4b0 [ 802.621282][T29835] ? __ia32_sys_shutdown+0x70/0x70 [ 802.626402][T29835] ? __lock_acquire+0x1666/0x56c0 [ 802.631450][T29835] ___sys_recvmsg+0xd5/0x200 [ 802.636049][T29835] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 802.641704][T29835] ? find_held_lock+0x2d/0x110 [ 802.646508][T29835] ? __might_fault+0xd1/0x170 [ 802.651197][T29835] ? lock_downgrade+0x6e0/0x6e0 [ 802.656069][T29835] do_recvmmsg+0x24d/0x6d0 [ 802.660497][T29835] ? ___sys_recvmsg+0x200/0x200 [ 802.665362][T29835] ? find_held_lock+0x2d/0x110 [ 802.670143][T29835] ? __context_tracking_exit+0xb9/0xe0 [ 802.675618][T29835] ? lock_downgrade+0x6e0/0x6e0 [ 802.680481][T29835] __x64_sys_recvmmsg+0x20b/0x260 [ 802.685517][T29835] ? __do_sys_socketcall+0x590/0x590 [ 802.690813][T29835] ? syscall_enter_from_user_mode+0x21/0x70 [ 802.696721][T29835] do_syscall_64+0x35/0xb0 [ 802.701141][T29835] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 802.707053][T29835] RIP: 0033:0x7f067a2a6049 [ 802.711485][T29835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 802.731130][T29835] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 802.739557][T29835] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 802.747542][T29835] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 802.755624][T29835] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 802.763610][T29835] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 802.771702][T29835] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 802.779695][T29835] 12:40:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 97) 12:40:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x0, 0xb}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 802.918759][T29846] FAULT_INJECTION: forcing a failure. [ 802.918759][T29846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.952972][T29846] CPU: 0 PID: 29846 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 802.963525][T29846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.973602][T29846] Call Trace: [ 802.976893][T29846] [ 802.979835][T29846] dump_stack_lvl+0xcd/0x134 [ 802.984451][T29846] should_fail.cold+0x5/0xa [ 802.989002][T29846] _copy_from_user+0x2c/0x180 [ 802.993696][T29846] __copy_msghdr_from_user+0x91/0x4b0 [ 802.999084][T29846] ? __ia32_sys_shutdown+0x70/0x70 [ 803.004250][T29846] ? __lock_acquire+0x1666/0x56c0 [ 803.009332][T29846] ___sys_recvmsg+0xd5/0x200 [ 803.013974][T29846] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 803.019633][T29846] ? find_held_lock+0x2d/0x110 [ 803.024504][T29846] ? __might_fault+0xd1/0x170 [ 803.029195][T29846] ? lock_downgrade+0x6e0/0x6e0 [ 803.034089][T29846] do_recvmmsg+0x24d/0x6d0 [ 803.038524][T29846] ? ___sys_recvmsg+0x200/0x200 [ 803.043391][T29846] ? find_held_lock+0x2d/0x110 [ 803.048169][T29846] ? __context_tracking_exit+0xb9/0xe0 [ 803.053643][T29846] ? lock_downgrade+0x6e0/0x6e0 [ 803.058522][T29846] __x64_sys_recvmmsg+0x20b/0x260 [ 803.063556][T29846] ? __do_sys_socketcall+0x590/0x590 [ 803.068873][T29846] ? syscall_enter_from_user_mode+0x21/0x70 [ 803.074798][T29846] do_syscall_64+0x35/0xb0 [ 803.079220][T29846] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 803.085125][T29846] RIP: 0033:0x7f067a2a6049 [ 803.089543][T29846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 803.109329][T29846] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 803.118108][T29846] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 803.126204][T29846] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 803.134199][T29846] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 803.142182][T29846] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 803.150178][T29846] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 803.158180][T29846] [ 803.166469][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079079800: rx timeout, send abort [ 803.182690][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079079800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 803.197345][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806e0bf400: rx timeout, send abort 12:40:34 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) socket(0x26, 0x80000, 0xe2) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x0, {0x0, 0x1}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) [ 803.206667][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806e0bf400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 98) 12:40:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x4c00, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x500, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 803.433241][T29860] FAULT_INJECTION: forcing a failure. [ 803.433241][T29860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.448012][T29860] CPU: 0 PID: 29860 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 803.458675][T29860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.468761][T29860] Call Trace: [ 803.472044][T29860] [ 803.475017][T29860] dump_stack_lvl+0xcd/0x134 [ 803.479626][T29860] should_fail.cold+0x5/0xa [ 803.484147][T29860] _copy_from_user+0x2c/0x180 [ 803.488926][T29860] __copy_msghdr_from_user+0x91/0x4b0 [ 803.494317][T29860] ? __ia32_sys_shutdown+0x70/0x70 [ 803.499456][T29860] ? __lock_acquire+0x1666/0x56c0 [ 803.504508][T29860] ___sys_recvmsg+0xd5/0x200 [ 803.509111][T29860] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 803.514765][T29860] ? find_held_lock+0x2d/0x110 [ 803.519545][T29860] ? __might_fault+0xd1/0x170 [ 803.524236][T29860] ? lock_downgrade+0x6e0/0x6e0 [ 803.529113][T29860] do_recvmmsg+0x24d/0x6d0 [ 803.533563][T29860] ? ___sys_recvmsg+0x200/0x200 [ 803.538428][T29860] ? find_held_lock+0x2d/0x110 [ 803.543204][T29860] ? __context_tracking_exit+0xb9/0xe0 [ 803.548689][T29860] ? lock_downgrade+0x6e0/0x6e0 [ 803.553569][T29860] __x64_sys_recvmmsg+0x20b/0x260 [ 803.558605][T29860] ? __do_sys_socketcall+0x590/0x590 [ 803.563912][T29860] ? syscall_enter_from_user_mode+0x21/0x70 [ 803.569823][T29860] do_syscall_64+0x35/0xb0 [ 803.574250][T29860] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 803.580153][T29860] RIP: 0033:0x7f067a2a6049 [ 803.584573][T29860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 803.604201][T29860] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 803.612642][T29860] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 803.620632][T29860] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 803.628604][T29860] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 803.636836][T29860] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 803.644810][T29860] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 803.652818][T29860] 12:40:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xfeffffff, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 99) 12:40:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x0, 0xc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 803.794467][T29867] FAULT_INJECTION: forcing a failure. [ 803.794467][T29867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.811669][T29867] CPU: 1 PID: 29867 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 803.822222][T29867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.832303][T29867] Call Trace: [ 803.835621][T29867] [ 803.838562][T29867] dump_stack_lvl+0xcd/0x134 [ 803.843181][T29867] should_fail.cold+0x5/0xa [ 803.847731][T29867] _copy_from_user+0x2c/0x180 [ 803.852438][T29867] __copy_msghdr_from_user+0x91/0x4b0 [ 803.857844][T29867] ? __ia32_sys_shutdown+0x70/0x70 [ 803.862979][T29867] ? __lock_acquire+0x1666/0x56c0 [ 803.868049][T29867] ___sys_recvmsg+0xd5/0x200 [ 803.872666][T29867] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 803.878341][T29867] ? find_held_lock+0x2d/0x110 [ 803.883136][T29867] ? __might_fault+0xd1/0x170 [ 803.887832][T29867] ? lock_downgrade+0x6e0/0x6e0 [ 803.893157][T29867] do_recvmmsg+0x24d/0x6d0 [ 803.897618][T29867] ? ___sys_recvmsg+0x200/0x200 [ 803.902487][T29867] ? find_held_lock+0x2d/0x110 [ 803.907262][T29867] ? __context_tracking_exit+0xb9/0xe0 [ 803.912738][T29867] ? lock_downgrade+0x6e0/0x6e0 [ 803.917599][T29867] __x64_sys_recvmmsg+0x20b/0x260 [ 803.922634][T29867] ? __do_sys_socketcall+0x590/0x590 [ 803.927948][T29867] ? syscall_enter_from_user_mode+0x21/0x70 [ 803.933853][T29867] do_syscall_64+0x35/0xb0 [ 803.938290][T29867] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 803.944190][T29867] RIP: 0033:0x7f067a2a6049 [ 803.948609][T29867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 803.968253][T29867] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 803.976682][T29867] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 803.984658][T29867] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 803.992636][T29867] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 804.000608][T29867] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 804.008579][T29867] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 804.016568][T29867] 12:40:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) (fail_nth: 100) 12:40:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 804.161132][T29876] FAULT_INJECTION: forcing a failure. [ 804.161132][T29876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.214414][T29876] CPU: 1 PID: 29876 Comm: syz-executor.5 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 804.224966][T29876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.235040][T29876] Call Trace: [ 804.238333][T29876] [ 804.241277][T29876] dump_stack_lvl+0xcd/0x134 [ 804.245895][T29876] should_fail.cold+0x5/0xa [ 804.250460][T29876] _copy_from_user+0x2c/0x180 [ 804.255162][T29876] __copy_msghdr_from_user+0x91/0x4b0 [ 804.260562][T29876] ? __ia32_sys_shutdown+0x70/0x70 [ 804.265696][T29876] ? __lock_acquire+0x1666/0x56c0 [ 804.270762][T29876] ___sys_recvmsg+0xd5/0x200 [ 804.275374][T29876] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 804.281045][T29876] ? find_held_lock+0x2d/0x110 [ 804.285839][T29876] ? __might_fault+0xd1/0x170 [ 804.290541][T29876] ? lock_downgrade+0x6e0/0x6e0 [ 804.295446][T29876] do_recvmmsg+0x24d/0x6d0 [ 804.299894][T29876] ? ___sys_recvmsg+0x200/0x200 [ 804.304782][T29876] ? find_held_lock+0x2d/0x110 [ 804.309577][T29876] ? __context_tracking_exit+0xb9/0xe0 [ 804.315069][T29876] ? lock_downgrade+0x6e0/0x6e0 [ 804.319950][T29876] __x64_sys_recvmmsg+0x20b/0x260 [ 804.325003][T29876] ? __do_sys_socketcall+0x590/0x590 [ 804.330324][T29876] ? syscall_enter_from_user_mode+0x21/0x70 [ 804.336240][T29876] do_syscall_64+0x35/0xb0 [ 804.340651][T29876] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 804.346565][T29876] RIP: 0033:0x7f067a2a6049 [ 804.351162][T29876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 804.370803][T29876] RSP: 002b:00007f0678c1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 804.379218][T29876] RAX: ffffffffffffffda RBX: 00007f067a3b8f60 RCX: 00007f067a2a6049 [ 804.387316][T29876] RDX: 000000000000021e RSI: 0000000020000080 RDI: 0000000000000003 [ 804.395397][T29876] RBP: 00007f0678c1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 804.403500][T29876] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000003 12:40:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) [ 804.411492][T29876] R13: 00007ffe847c670f R14: 00007f0678c1b300 R15: 0000000000022000 [ 804.419504][T29876] 12:40:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x0, 0xe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xffffe000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:35 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) socket(0x26, 0x80000, 0xe2) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x0, {0x0, 0x1}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) (async) socket(0x26, 0x80000, 0xe2) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f00000000c0)={&(0x7f0000001080)="7bddefd0275090340f", 0x9}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x0, {0x0, 0x1}}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000240)="7bddefd0275090340f", 0x9}}, 0x0) (async) 12:40:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x600, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x2, 0x40010002, 0x0) [ 804.625161][ C1] vcan0: j1939_tp_rxtimer: 0xffff888019155000: rx timeout, send abort [ 804.634097][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888019155000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 804.649606][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880798dfc00: rx timeout, send abort [ 804.658761][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880798dfc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 12:40:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x6800, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x3, 0x40010002, 0x0) 12:40:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x4, 0x40010002, 0x0) 12:40:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x5, 0x40010002, 0x0) 12:40:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x0, {0x0, 0x12}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0x700, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x6, 0x40010002, 0x0) 12:40:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x6, 0xfffff000, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @bitwise={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 12:40:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001780)=""/251, 0xfb}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x7, 0x40010002, 0x0) [ 805.971203][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880735d3400: rx timeout, send abort [ 805.979528][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880735d3400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 805.994232][ C1] ------------[ cut here ]------------ [ 806.000099][ C1] WARNING: CPU: 1 PID: 20 at net/can/j1939/socket.c:181 j1939_sk_queue_activate_next+0x34d/0x460 [ 806.010706][ C1] Modules linked in: [ 806.014674][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 806.024908][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.035020][ C1] RIP: 0010:j1939_sk_queue_activate_next+0x34d/0x460 [ 806.041733][ C1] Code: 1c 83 c0 0a 89 44 24 04 eb 9d 48 c7 c7 ac b0 94 8d e8 f7 58 95 f9 e9 73 fd ff ff e8 ed 58 95 f9 e9 19 fe ff ff e8 93 7c 4d f9 <0f> 0b 49 8d bf b8 00 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 [ 806.061410][ C1] RSP: 0018:ffffc900001a7950 EFLAGS: 00010246 [ 806.067515][ C1] RAX: 0000000000000000 RBX: ffff88804cd96000 RCX: 0000000000000100 [ 806.075677][ C1] RDX: ffff888010fc0000 RSI: ffffffff882b314d RDI: 0000000000000003 [ 806.083756][ C1] RBP: ffff88804cd965a8 R08: 0000000000000000 R09: ffffffff8fdfba7f [ 806.091751][ C1] R10: ffffffff882b30a8 R11: 0000000000000001 R12: ffff8880790c0000 [ 806.099776][ C1] R13: ffff88804cd965e8 R14: dffffc0000000000 R15: ffff8880790c0018 [ 806.107792][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 806.116769][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 806.123409][ C1] CR2: 0000001b2dc22000 CR3: 0000000053200000 CR4: 00000000003506e0 [ 806.131375][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 806.139400][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 806.147695][ C1] Call Trace: [ 806.150985][ C1] [ 806.153974][ C1] j1939_session_deactivate_activate_next+0xc8/0xd3 [ 806.160654][ C1] j1939_xtp_rx_abort_one.cold+0x20b/0x33c [ 806.166527][ C1] j1939_tp_recv+0xb28/0xcb0 [ 806.171141][ C1] j1939_can_recv+0x6ff/0x9a0 [ 806.175875][ C1] ? j1939_netdev_notify+0x1d0/0x1d0 [ 806.181185][ C1] ? j1939_netdev_notify+0x1d0/0x1d0 [ 806.186544][ C1] can_rcv_filter+0x5d4/0x8d0 [ 806.191240][ C1] can_receive+0x31d/0x580 [ 806.195718][ C1] can_rcv+0x120/0x1c0 [ 806.199806][ C1] ? can_receive+0x580/0x580 [ 806.204470][ C1] __netif_receive_skb_one_core+0x114/0x180 [ 806.210387][ C1] ? __netif_receive_skb_core+0x3880/0x3880 [ 806.216347][ C1] ? do_raw_spin_lock+0x120/0x2b0 [ 806.221389][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 806.226475][ C1] __netif_receive_skb+0x24/0x1b0 [ 806.231539][ C1] process_backlog+0x2a5/0x680 [ 806.236362][ C1] __napi_poll+0xaf/0x440 [ 806.240746][ C1] net_rx_action+0x801/0xb40 [ 806.245591][ C1] ? napi_threaded_poll+0x520/0x520 [ 806.250809][ C1] ? sched_clock_cpu+0x15/0x1f0 [ 806.255765][ C1] __do_softirq+0x29b/0x9c2 [ 806.260327][ C1] ? __irq_exit_rcu+0x180/0x180 [ 806.265231][ C1] run_ksoftirqd+0x2d/0x60 [ 806.269672][ C1] smpboot_thread_fn+0x645/0x9c0 [ 806.274774][ C1] ? smpboot_register_percpu_thread+0x370/0x370 [ 806.281052][ C1] kthread+0x2e9/0x3a0 [ 806.285346][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 806.291010][ C1] ret_from_fork+0x1f/0x30 [ 806.295517][ C1] [ 806.298543][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 806.305117][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.17.0-rc6-syzkaller-01957-g72f00505f2d2 #0 [ 806.315376][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.325449][ C1] Call Trace: [ 806.328742][ C1] [ 806.331670][ C1] dump_stack_lvl+0xcd/0x134 [ 806.336274][ C1] panic+0x2b0/0x6dd [ 806.340319][ C1] ? __warn_printk+0xf3/0xf3 [ 806.344936][ C1] ? __warn.cold+0x1d1/0x2cf [ 806.349538][ C1] ? j1939_sk_queue_activate_next+0x34d/0x460 [ 806.355713][ C1] __warn.cold+0x1ec/0x2cf [ 806.360136][ C1] ? j1939_sk_queue_activate_next+0x34d/0x460 [ 806.366207][ C1] report_bug+0x1bd/0x210 [ 806.370567][ C1] handle_bug+0x3c/0x60 [ 806.374726][ C1] exc_invalid_op+0x14/0x40 [ 806.379230][ C1] asm_exc_invalid_op+0x12/0x20 [ 806.384069][ C1] RIP: 0010:j1939_sk_queue_activate_next+0x34d/0x460 [ 806.390737][ C1] Code: 1c 83 c0 0a 89 44 24 04 eb 9d 48 c7 c7 ac b0 94 8d e8 f7 58 95 f9 e9 73 fd ff ff e8 ed 58 95 f9 e9 19 fe ff ff e8 93 7c 4d f9 <0f> 0b 49 8d bf b8 00 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 [ 806.410448][ C1] RSP: 0018:ffffc900001a7950 EFLAGS: 00010246 [ 806.416578][ C1] RAX: 0000000000000000 RBX: ffff88804cd96000 RCX: 0000000000000100 [ 806.424626][ C1] RDX: ffff888010fc0000 RSI: ffffffff882b314d RDI: 0000000000000003 [ 806.432612][ C1] RBP: ffff88804cd965a8 R08: 0000000000000000 R09: ffffffff8fdfba7f [ 806.441559][ C1] R10: ffffffff882b30a8 R11: 0000000000000001 R12: ffff8880790c0000 [ 806.449828][ C1] R13: ffff88804cd965e8 R14: dffffc0000000000 R15: ffff8880790c0018 [ 806.457803][ C1] ? j1939_sk_queue_activate_next+0x2a8/0x460 [ 806.463875][ C1] ? j1939_sk_queue_activate_next+0x34d/0x460 [ 806.469954][ C1] j1939_session_deactivate_activate_next+0xc8/0xd3 [ 806.476602][ C1] j1939_xtp_rx_abort_one.cold+0x20b/0x33c [ 806.482440][ C1] j1939_tp_recv+0xb28/0xcb0 [ 806.487064][ C1] j1939_can_recv+0x6ff/0x9a0 [ 806.491744][ C1] ? j1939_netdev_notify+0x1d0/0x1d0 [ 806.497039][ C1] ? j1939_netdev_notify+0x1d0/0x1d0 [ 806.502352][ C1] can_rcv_filter+0x5d4/0x8d0 [ 806.507033][ C1] can_receive+0x31d/0x580 [ 806.511580][ C1] can_rcv+0x120/0x1c0 [ 806.515654][ C1] ? can_receive+0x580/0x580 [ 806.520273][ C1] __netif_receive_skb_one_core+0x114/0x180 [ 806.526164][ C1] ? __netif_receive_skb_core+0x3880/0x3880 [ 806.532051][ C1] ? do_raw_spin_lock+0x120/0x2b0 [ 806.537073][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 806.542011][ C1] __netif_receive_skb+0x24/0x1b0 [ 806.547036][ C1] process_backlog+0x2a5/0x680 [ 806.551806][ C1] __napi_poll+0xaf/0x440 [ 806.556148][ C1] net_rx_action+0x801/0xb40 [ 806.560777][ C1] ? napi_threaded_poll+0x520/0x520 [ 806.566078][ C1] ? sched_clock_cpu+0x15/0x1f0 [ 806.571056][ C1] __do_softirq+0x29b/0x9c2 [ 806.575559][ C1] ? __irq_exit_rcu+0x180/0x180 [ 806.580410][ C1] run_ksoftirqd+0x2d/0x60 [ 806.584820][ C1] smpboot_thread_fn+0x645/0x9c0 [ 806.589753][ C1] ? smpboot_register_percpu_thread+0x370/0x370 [ 806.596087][ C1] kthread+0x2e9/0x3a0 [ 806.600178][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 806.605817][ C1] ret_from_fork+0x1f/0x30 [ 806.610237][ C1] [ 806.613463][ C1] Kernel Offset: disabled [ 806.617947][ C1] Rebooting in 86400 seconds..