0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff00"/94288, @ANYRESDEC=r0]) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) 20:03:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100009effffff0000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000f0ffffff0000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:44 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, 0x0, 0x0, 0xd9f, 0x0) 20:03:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x10001, 0x0, 0x5}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r2, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r2, 0x1}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000180)=0x8) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000180)=0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x28, 0x70, 0x500, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x0, 0x2, 0x10}}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) getsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000180)=0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80000) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffbf, 0x3}, 0xff53) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000200000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000180)=0x8) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x10001, 0x0, 0x5}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r5, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={r5, 0x1}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0008000041010200140012800b0001006c1b7770616e00000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100a010000000000000000000000000a14004ec49d2dfafe15ac23e5c77adee200001100"], 0x28}}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1800003, 0x12, r2, 0x1000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="150005000000", 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x10001, 0x0, 0x5}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r3, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r3, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @broadcast}}, 0x0, 0x0, 0x2bf, 0x4, 0x6c}, 0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x8001}, &(0x7f0000000240)=0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x1f, [0x10000000000000, 0x0, 0x7fff, 0x8, 0x4, 0x494]}) 20:03:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000700000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x40010, r1, 0x80df000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={{0x14}, [], {0x14}}, 0x28}}, 0x0) preadv(r2, &(0x7f0000000100), 0x0, 0xd9f, 0x439266bd) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000f00000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:44 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, 0x0, 0x0, 0xd9f, 0x0) 20:03:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:44 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xd9f, 0x1ca) write(r0, &(0x7f0000000040)="150005000000", 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}, 0x10001, 0x0, 0x5}, &(0x7f0000000000)=0x98) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001240)='/dev/nvme-fabrics\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={r4, 0x7000002}, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r4, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={r4, @in={{0x2, 0x1, @broadcast}}, 0x0, 0x0, 0x2bf, 0x4, 0x6c}, 0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r4, 0x8001}, &(0x7f0000000240)=0x8) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x9) 20:03:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000f000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000007000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x1a, 0xf1d}, 0x24}}, 0x0) writev(r2, 0xfffffffffffffffe, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000f000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:45 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) 20:03:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f000053a000/0x1000)=nil, 0x1000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000f0000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:45 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000040030000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xcd01, 0x0) ioctl$sock_bt_hci(r1, 0x7, &(0x7f0000000180)="6322099d31ef48697e703cd65592c012c0fca6c2fcc9ba33785c70a71751cd435d60ca6158c7ea40440b6221432f720b5a31d6409915e181cfeb02af51c3d88edee220936ad3b7d23d541d9a4933d84bc44897336784236350bf0366ed3654710faa62fb592e9e11a525ab829683533350805ade397b83c78820d9ba13d288edc03e634e4ceb97ddddb8956eb4000ad06b6d44b1dae03d86a41a2043b516ea6b2470fd") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400f0ff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 445.153644] nla_parse: 76 callbacks suppressed [ 445.153713] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:03:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000003400000e82000000009001f0070687931"], 0x34}}, 0x0) [ 445.229795] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:03:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x10001, 0x0, 0x5}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r2, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r2, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={r2, @in={{0x2, 0x1, @broadcast}}, 0x0, 0x0, 0x2bf, 0x4, 0x6c}, 0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x8001}, &(0x7f0000000240)=0x8) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000001780)="0009a4b3bacc8370677de6352e58f3291e6b0d3ea29b871b6353215aadd146e69c62b70b4992a6e7e26ee55c87cbafb5ebd0c04d48005d") write$bt_hci(r0, &(0x7f00000018c0)={0x1, @write_auth_payload_to={{0xc7c, 0x4}, {0xc9, 0x7fff}}}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = dup3(r3, r3, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000001880)=0xff, 0x4) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = syz_mount_image$befs(&(0x7f0000000080)='befs\x00', &(0x7f00000000c0)='./file0\x00', 0xfaa, 0xa, &(0x7f0000001b40)=[{&(0x7f0000000180)="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", 0x1000, 0x3}, {&(0x7f0000000100)="85eff2daad1131f197975d6f4d33eba14b8cc900f573116789180f58a68437196b81db28c2574bd67cefd08e7eeaf291d795", 0x32, 0x3}, {&(0x7f0000001180)="dabb5f2435cab64a7547b83bc7a10bb202b47f322f2e9ce3e92fc12008d07b5ad1dad5e3308377010cc31acd681d0ec514d1fb316f483f8e147b6516c04a1ef3f2ab772807dd22cb87758573c400a2ae42d2b1ac9694fc5609d84cb1da874f3356cea540b6bdb4b1040cbd5a8430aee908645b8860fb45a1948ec245884b6e6c504221612c97d5ff29127e2b7622c18b9ac5a0eb25e4fa35edce5193de3745e5ec7e5c8a3706b701d89037869863b90d906c2fc12e6a04fb607a1a97ce07087edab470d2f68cf13276f7162d2d61d7ce10dfd1b4", 0xd4, 0x100}, {&(0x7f0000001280)="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", 0xfd, 0x62}, {&(0x7f0000001380)="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", 0xfe, 0x8}, {&(0x7f0000001480)="bc27b7fb29742f62f3b896245d9fcc41eda2f80cf9b0c469033b4e035b904c94748ef84c4b454b426f7e07c04f52be9952b9dd95aa9fbfecf4d0d5668340e7c6e7d395", 0x43, 0x4}, {&(0x7f0000001500)="c77d75b21bfad2660b9746a6dae7ff44209d5d77b59e9a8c653f314ef9779940836ac2c2fcbd8b27c478805d96c4ace45bd79912f48e09f07f4d650bbe8ac026f0adbe46ad616e6565e78d4ca74ce9256167908c99f902833b8507d093acc13accf2a07ae3c519355f79b4ec06af99575082fe8232633889ebb8fcb5cc587ce63baedc636d408a5ce2c7749d9f33099e2de73f0eea6baa74105f323b1c5b6d7485d1535af8e1c326928bff7bd6dcde3688389c61433d11cddd5bbea9f3db6915a82749bec8403bf566ce6d153e5de0236b8ed37e82df766b517c91425385ed36434438", 0xe3}, {&(0x7f0000001600)="d686be9380df39362ceb9fc3eaa0dcc141cc7dcc9adafb45c79deb90526bdb47b2fe29b180185c6c15c9d26c6000287676c32bbaaacc99f9e81a5b0c104e74f17ee35148bd2b24d12cfa999b0352c95bb8939ef6c61cdaab8ce801b0f6ebc5a5172a45d09dccced41832b107730961077c861145debee31e633929a296495560d3d738427c53d6574c79d51d4853b1f4298fcf00e75b5e2fca0c6b5dba0543bbcd1be67036f1b606f406e5e7366f8801309eff39c417", 0xb6}, {&(0x7f00000016c0)="4a359154671240d41fa72655bffb0bf6637c8b6804d01240abfeb7e9f5218ed1087f3d4099d53f168912ff614d40c1a5a6f2a5888f42da3c0aeab284d8a93d3d5dc2874f4ae1c4ecb22008ee1e39f5fcb76fd3234bca9c3547b0f0aa3a1c7b8c80774b155a3f9dfba9ecbe8a27e1a8b8096604bbe2611d69163cb90ce10abf0f590c22273b2d2ff5f9d0f48a35afcf9b099a", 0x92, 0x1ff}, {&(0x7f0000001940)="727c4937c9a71ccfca494c32c4a33283bc140cc290c460645cd47c4b2b8729e7e1ccfedfede825e8473faecd86412c26763e785fed08e3bc109192ed51f1a6537d3f", 0x42, 0x20}], 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="2c292c2d297d2f02085e742c282f2d2f28232b2c736d61636b6673666c2d626a5f7573657269643d62333566373661662d316334372d310039392d646437652d37396666633137322c6f626a5f757365723d282c6d61736b3d5e4d41595f415050454e442c0000005bf125e912a2ed06a7d1ea93b3e33bb30e686f916013df6bd30c5b437265fbb8a7feaada5daea3329c5e1dc8a74244e2995e7d2c0ae82ea2139b2a8f2751f95ec17656cd68f24906bf476f9bc4c7c0f709a5c300000000000000"]) openat(r5, &(0x7f0000001900)='./file0\x00', 0x200040, 0x22) write(r0, &(0x7f0000000040)="150005000000", 0x6) [ 445.315869] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 445.370388] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 445.452771] befs: Unrecognized mount option ")" or missing value [ 445.477901] befs: (loop0): cannot parse mount options 20:03:46 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) 20:03:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000200", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000fffff00000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) ioctl$sock_bt_hci(r2, 0x800448d7, &(0x7f0000000380)="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") getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000180)=0x8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00080000410102002c0012800b00010069703667726500001c00028008000400040000000600020000000000060003000900000008000a00", @ANYRES32=r3, @ANYBLOB="477533b11ccf00881c2fe49c098666ac9f472d21157064dd6b9b4c52a4ce6eda2ce9a4444ef0f98f15d0f79353e6d9454a04a03133eba5db9b8c32c10994236f1d5fd8e13396ae611b1d904c02e6de7d0d08e671a1cefcc36053959027c7310baf3a411ba801a1b89b9c6ea7b317110f6cd5acd059b58d28c4873dfbe37f8dce2c1ea411bdc4d5318fafd56da8f01910ce62e1fc8e0ff8127825ed5b725cd7557cfefa1e73791cc7b94943ba5d54dd776d2ae679bfb28a427f875639111abcd78c073f1f54f2178003281546cf5cf49e09e1573bab334e842d4d4029f6f25090a78d24bce0aaa6d8a2f718e1041162bde6041380940caf980b56a4d0b15c5dad55cecb842690df89484d621a67bd799f509b75c4fb01250c59a4a4c670e5fdc23052cef9ae5015cfb22d116d251532adae0055"], 0x54}}, 0x0) getsockname(r1, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000000100)=0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) waitid$P_PIDFD(0x3, r4, &(0x7f0000000080), 0xa49d8e886c3571d9, &(0x7f0000000180)) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:46 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 445.770794] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:03:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000300", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000100e82000000009001f0070687931"], 0x34}}, 0x0) [ 445.834009] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:03:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0xee00, r3, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0xd0005, &(0x7f0000000180)={[{@huge_never='huge=never'}], [{@smackfshat={'smackfshat', 0x3d, '[]%#'}}, {@fowner_eq={'fowner'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_user={'subj_user', 0x3d, '}.-'}}, {@appraise_type='appraise_type=imasig'}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@dont_measure='dont_measure'}]}) write(r0, &(0x7f0000000040)="150005000000", 0x6) [ 445.897516] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 445.930558] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:03:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000400", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000200e82000000009001f0070687931"], 0x34}}, 0x0) [ 446.067614] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 446.110400] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:03:46 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) 20:03:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_mount_image$romfs(&(0x7f0000000080)='romfs\x00', &(0x7f00000000c0)='./file0\x00', 0x80000001, 0x6, &(0x7f0000001400)=[{&(0x7f0000000180)="eac7e5c72973d713651d1d989728115ae82165cd82c7356d42d26e543118f58d734fc64d421f9451954a6fb09ad823b1bafa25b000ad1e2c587116e91bb3f3c16142e0bde16cbd0c383ff8caac6f8cfa4da0259dde950368cda544f180a42232ee24685d2fa941ad68eb55622ebc0b", 0x6f, 0x3}, {&(0x7f0000000200)="4cc025effbf9756628b38cd98eb78f299ef120894813be2d3ef6add1fc66c13949b56e341d33af996b8290feb0ee6d9c3586ece8f3d8da630e1813e6e92a99790d90170f5f750e7fa6951f601ad4141feb454cb57672db671a954bab2fc5050c58cb8b29a38fd47dfeed35a0ae2ea16a9686a622a88145694838d99f5f926d316cc9447a", 0x84, 0x800}, {&(0x7f00000002c0)="535bf4c30acc11bc19f7570b4b3ee8c3f2bc1ad3d429556ec54dbf3b81e79e54d1f393b87760558c31e592126fbb28c39bf5df5ed5a9dd1856d86bd3bb52cd846e073a96df3b7d2ca02a715d4f3a06c4e2fa146cd5d48d7c79d5b861d26712095a457cd4a6", 0x65, 0x3}, {&(0x7f0000000100)="9493c46e182a69ca262157bc3a57457e827d37098eba998fda9cb9e6d555", 0x1e, 0x6}, {&(0x7f0000000340)="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", 0x1000, 0x80000001}, {&(0x7f0000001340)="2383dbff4b19d375f8da6fead98c7acbe9a567914fe3deda8075a5ea142d98753af45a361255dd6e0db2abc21bca88271c60fe5748baac7a6098c258ba6c40b03ccd8b91f39772588913de62785c58e7b10629dde04a587b93078313a098364b070a77feb4fb4025b88a9da39506865a852242f7a12f990abe87f417a69a9afc5bd2fd83da489f56f0ec9cd93a544a26d2c5a87ea803fc2aaed5", 0x9a, 0x6}], 0x20, &(0x7f00000014c0)=ANY=[@ANYBLOB="2b2b2b2c2c765b7b2c2b7d2ab57d2b2e245e2c5c3a298e2b2a5c5d7d2d5d282e2127282c2a5b2a27282d7b2c6673757569643d61666538323163652d393363342d643938312d636233382d9a343832643562372c66736d616769633d3078303030303030303030303030303030352c7569643c", @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) mmap(&(0x7f0000358000/0x4000)=nil, 0x4000, 0x1800003, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000359000/0x3000)=nil, 0x3000, 0x4, 0x100010, r2, 0x48c13000) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000500", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000700e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:47 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 20:03:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000f00e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000600", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000180)=0x8) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800, 0x20141}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}, @IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000f9a9478400e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\a\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\b\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ffffff9e00e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:47 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:47 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:03:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000fffffff000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x64ba, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000180)="e921b597073e4522783143cbc71e4cc41e198dc41e64dd4fb7b3e8ef966ed93a06f4e2625ca64b1b1474229e3c175a4781de13f5b7c54a9ef9ef389dd23e673d264345b9f753f67aa9b9e9a2d5368d173fbd29d8d8acf615964bf571e7f59eff3671a6909bd67b3a31dc03b6819c450dbe326752f1d1afe77927319781aece96085f50ae00b1c7e43058623e495229f651f0901ea3e8f6a18f9c3b8b4ad44d620a9a099707cf4acb9a88c358ada5c0b2b978b05fcf47940089ab8e4e5f9818b5", 0x10c, 0x8ed}, {&(0x7f0000000240)="afdcc8d043d75e2e90bc9171381b18592498bd1232f5a26004e73d70b46a141e2048cad8cd0bd19a5a341a720ae8fe83b43d6f803b66e8aec5d5a4c9971eae29b2bb3b5cefe6e20180a9d6e43a3f270de4cab1a8789519d49c5292e8d03b0534981f798228ddb7a40262c0e4a59c447bf1c85a0555cbe47a5a5fa9c94eebf614dff9c826423770c3362b1ef000e472dd7027653bf7fc1cf9f25ac915ae9518668a36fb4e416fa423780aa794c590e7f482a507fe7da4c0cb0eb5aaca2392daba5fd4d332949e80e7c457c0de13979e5b76ad68bebf08", 0xd2, 0x7}, {&(0x7f0000000340)="b5fac35090cf233973610d9f6207770c5ce70438aa92d4a9e14d7babd4471d5f15ac6214b3575010bb785104ecdd5a4e8d3b2ea3d57037ff8ed8de7234ea2ad05ef2f30046afa6c08366a21a41b9b2c9aa76481d616d8f35cce7779347db68463f13971f583eafca9cdfc617e42eb1af8656cece8c81bd7cbd09442995281334804b6e498add33d05c6863671a0269601df335c7b69fabe2527fdbcd81479b6c24735b17ccd70713f118704a5c267b80124ed455f5", 0xb5, 0x2}, {&(0x7f0000000400)="7570416831283ea58e74295a1089e117573718cd617e07fcf8103554365106801e56c3a93ab385309aff4e805cb8b682d40049c313ca788c9e3b1058d7e43ade184e3b88cd814131ac3a7ffd7d31e1f61f63a7c900ab6bab452ece59aa1af2a875de42a8e85f9d85d43bb092db489f6c7c832e97864644e4c281ed58ef0c2751b6b4c18ba7ef7a77f6ff6668ef1ff6815b2a8cba6c997e3dd5a312b05a9cfeaaea8b844c526dcff5c3212049ae7d4746dbdb42f2f1ce61f7b870f35910608613f56ec864db5d06ab965d", 0xca, 0x2}, {&(0x7f0000000500)="07612e4dd97007079d0f2973bd6c4aa48bb7d4753c137d918e6cb6b3ecda0fe7f351836ba82898864c136efca0de46ef25be992e3c00909151a76ff2646db2a159ab80903e0d085737ecbf73e52633aa3f0754d2961726767b38130cda54694103fb5feeb6a54e8aa0551a64d612152c9d4e34b928a97255c47d47c99b1a66fd084e20faabf16896e8327b1a76243bc035123de16635a2a693703efdce92fc500aa3d390dde2438dd36c5453a657541746a7c07140a618b7f4168c", 0xe0, 0x6}, {&(0x7f00000005c0)="592a026627dfb4bf6f710d9263138ddf41b430ea0f0cf8dc8612673b61b26198e13456a5798797ca019629281b8df83b589e54e2154e0981aed2616572f14fbd55a00900dc1bce5c546db95eceeae5d7c02140dab6b7ad5d929015d7ae045654614abd5a74eb21c4399e2a7f22eb5039919602c880d73616af4dc2b7c274a0d545f0fd0b8d124ece6479378e03dab48e2bccfe8898e68a074927d74c403514a02547085dcdc6215d8b93e7a7d5b0dc6f20d349ce712592b34633d5206e3ca71d61838e7d9e2ade", 0xc7, 0x9}], 0x1000, &(0x7f0000000780)={[{'6!%\x05\x00-]\xb2\xc7\xbaW\xdf\xed \xdb/>\xdaR\x87\xa0\x04\x10\x138I\xf8;\xe3\xdb\x05<\x06\xb1?\xf4\n\x81A\xd2\xdczh7)\xa5J5\x96\xa5\x9e\xbc\x90\xc1\x9f\xe38\xa4\x970x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x10001, 0x0, 0x5}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r3, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r3, 0x1}, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000011c0)={0x4, 0x3f, "6238aa", 0x63, 0x40}) 20:03:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000f0ffff00e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00L\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:48 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:48 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000300", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000080)=""/121, 0x79}, {&(0x7f0000000180)=""/200, 0xc8}, {&(0x7f0000000100)=""/2, 0x2}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000400)=""/60, 0x3c}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/225, 0xe1}, {&(0x7f0000000580)=""/199, 0xc7}], 0x9, 0x6, 0x3) write(r0, &(0x7f0000000040)="150005000000", 0x6) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) process_vm_writev(r2, &(0x7f0000000d00)=[{&(0x7f0000000740)=""/85, 0x55}, {&(0x7f00000007c0)=""/120, 0x78}, {&(0x7f0000000840)=""/216, 0xd8}, {&(0x7f0000000940)=""/204, 0xcc}, {&(0x7f0000000a40)=""/216, 0xd8}, {&(0x7f0000000b40)=""/234, 0xea}, {&(0x7f0000000c40)=""/169, 0xa9}], 0x7, &(0x7f0000000f00)=[{&(0x7f0000000d80)=""/115, 0x73}, {&(0x7f0000000440)=""/17, 0x11}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/185, 0xb9}], 0x4, 0x0) 20:03:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000007fffffff00e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00`\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00h\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000009effffff00e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000400", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x5, 0x80000, 0x5, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x2, 0x1}, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x10001, 0x0, 0x5}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r6, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={r6, 0x1}, 0x0) sendmmsg$unix(r4, &(0x7f00000001c0), 0x0, 0x6044005) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={r6, @in={{0x2, 0x1, @broadcast}}, 0x0, 0x0, 0x2bf, 0x4, 0x6c}, 0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r6, 0x8001}, &(0x7f0000000240)=0x8) mmap(&(0x7f00007f3000/0x1000)=nil, 0x1000, 0x3000006, 0x20010, r2, 0x79387000) mmap(&(0x7f00007d6000/0x4000)=nil, 0x4000, 0x1800003, 0x12, r4, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000f0ffffff00e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00l\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:49 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:49 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000500", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) accept4(r0, 0x0, &(0x7f0000000100), 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000180)="654e36358b3e90ebeb805fd78299b228e0b3e6efe3c31713c1fcd271e81476f2ac08627daa3d8fcce43d9cc19d2eda8a65fe311f378468445b2906b9a2fb1477606e56e54345893ca8744a91499ff9615e8ef424263de6897206f4474880f260b45d10b78c7f508747e41e4ab8f5625006a4a5715f530514fef59e678227ab709b26eb98a8ea4f4b37a6bd2258160ed82815e482f3096e71c5c8ed572c0e55a571abb85d8cc3ee73b32e10d8243c1df193938471caf0146e48272a85543fbb9aaf91208432bc34f036d68eef59927889307d882f22c1096cb902133a2ad427030a033ab04dd5064d1ce54dbae41d949da9ea47522956712da73309a14305ee75d317b1438c33e7e2e7d52bcd4382e399a832b30802a101b2034467ef208f27691f534d3abf1ff75b079323dbceeddb3aeb9655d3666036a7875888e8a8cad5af2ffc12b8414ab50979b7d14c901c3d6ca878fd74f2b135e0cfb8871574a69e78a4b71c6783e2f622dd1dd403e4c2347d712c4c32e65e9c948e8d85bbd609b30ec4ae69c62c27e63aa3c1613af2683b87c398a66873f9f9c26957e84d0a6bca327715a0c9105dc56d17c1d72cf8a852507548dbaaef95d6b5c451058d08f8d50c8b4a403c32cc557e4c9d4980c262cab17118118cba6ffd1a3db23ec6d183af69e8bb159d5e44bbd9c9fcfaf897f288fd8f4e662710a7aa9f075cb1a78ab317b04b0e24bf8101f1eb6074133606ecf9e7b6e42c55463527e266a6bb9f65ae23b52a6d64f66341cdad8df1c7262728ee2e476a6438004e3c6da68ddefada39ed79644f9b758eccaf6035b7d3554ceb95ba44c4bf61e299275897c7d3eb3d8fb6a3bbdfae89b3839c21602e8f0aaf26cf7f2b8ba7ff2a9af5b81eaf8ebd185ab5e086d4aaf66f762b80d22b4f22eab094190df6cda04a946c4263a97a033607e09bf51a7eeaadfd35a136b4e931ec03cc29c06c39c607f7e737730c0920adea0906ad85ff672a401d1e99e29cbd826b49dbb131bba09038e05373ea04cba86dd365d75cb0ba760aba34c1fad597dce05cd87ecd3d09a7cdb680a2b6532706ed97faa948acf3eaff1a5dcd1835d5e4a7a5aa43d080efb095703a128bfa6776c187a878d6695f127a265db8f4961532dd375332b29c86b76dae87b0a02bf1fa4f2bf932821ab10d079c5952f348c2176fd79664aba2c4cc00f957933e59165a3a6068d1f5084b94c97c0e2ec394166e20285fd66ee7b02bb535a065c71eaf99d68feed279c6661f22f6fd4b428a5cabf495a176dba71057a61db2d95b14f7edbf60c4151fae0feb009de6f935f60a2074738814f38e709be3dd045abeca5dd88b7c71e1dcd3bca9fd1ac4554810ede3e1687a33f9b8e6c6c6d5acab1f9d72c6367a0d8a1af8e8c777728414d525f633e4f497fe7ec424b370cc248ca947df03a712d3ed1f964e666c3acd4279e34bd0583d0d4284f29c89c1b4deafd2a53eceb9b431f4840cb3bb0513bcd75b0cbcca4073f9c08a6224ce0f956310f7bb6799e147200f4850fbcb72477783aa98c3e4834cbb4899a92a59b8a6a3b6039bd2752e1f22a4886b23c6beeb5acca6755f035322164dfe4b4e80bcace2b4ea63f9c491d653cc3a654bf1f863c2912dee45d88804d75836b1c7b55c8f9c8b293c6596986df9f0125136dd0707536aacb060e3837aa488d58191a8125935adcd21339ad7172f67c27c41f438053e33eac87984a80ba8fd88dcfd579fb63973e405294898c2ee4fdef0275df147a8d7fa4288235b4f870458ba427c34b9d62d8fd85cfd1380eab17c697222e91103d875db34e3d0d0d33f27e59d464ea4add94b9a9036d95feb9242ec1cdda6df4dc14b8f28a917956562b0249deb9c5986a7dc27b52a9da64a557144d92e8944565de68f9847f5bac5ed4c51f7c881f2ea2ed6d19fb17c7df504f48c9329741673bbecd97f7a1bd963f325781bb836f9fde6c60deb218afc9becb65d5dc9a61a65d74b0095d6fce5080668c11cb99f7f1363bd1fe8940381375973e8bfce51b5e290d3eb54d56d2ed2a592d61d36d75e9a91c3c20b9b43eb4c9a9020165b242088f842e48f54c236ed9d4f72a7f729d86a06519a624f1497de21c3effc1f4e9d017bfe40b01dde3a39caf6ef47ce7ba32103ecf23048831f65a7b267a6421a1ab30b249af9d0719c94dd3fed0456ffee6cc1a2d3b4c05f41b1b013e48f9b6013f9f5ea397d729e5493e54a29b3e3b2538a6d5ebd565e23241f7f5a98eb145e216e5bcdd25b991f34a5c81a96f849fbadd0ffa5c6923f5ac8a8e5849bb863024f34631221a2f8ef89c07af6901655dd53c545612aa7392f4ccde7ffd83420cbf3d059f283d72b9484bd264fdb2c6d5e092a5c92b299771d1df45156638c8e011702bdfc80036ce1bfcad0039d427874f56be52ca66182f590d35b11b69cdb21322a400622c55fbe5a384ae6dfa0d20707d5725b3ba9202a160327029b64a05aec6a98f49772ea54ecef15d38aa458afeb282bb864d7498bd82b4b1b2dcc4fd5ce0dcdb34cd5b3c228a73a29440fb89b4fc8802c5734d0e7a004565a81e13d5b3d22568a1b585ccc083f3a8d103c2e519987ddfb138215348da371d67286a42b5a2b85afe7e1b1adab29773a9d1520cd344efd342ad06f1909e522328db8e15bff8546dbdaaa630f2d08cfca21e20708b02980fda2587b57da1c0267136dbd342b1410d589d4bece94af7e0c9cc4d179529aad80a8ae75d2dfd92e6a2909b5b1b46711ec2afa8f31e30b41a24d2c0e81eb46d88f9b3180e9d7c3be5d97c7b68ee7b058bfac207d5b5883f8d32c6ed2d41f18f14ef144505c5947efa844a847ec6cde2073f012a505331c6be81f5504206d5027b7dc2c766c8b4663fe9358f60d917cfc160c3945775d7ebe213863a3ae7060d090bfe8199e0ec2385a409f34d923480a64bbabf707d53e54c902780b15c64374f1ec6b6df3aa29022989308bcc5315861eac3061506d579a601e4102474d5e1777df2f64d01253dbdee0e0303a804073982efa410bade7250f36e3b7d0c8c02719909b0aa5c1de1bb45abd421a02a613ba7b15f7d0eac0672c1af72010bf9873ce2ce7f8e3ee140a16f7b122f2e8ae687fdc41cda978a8f4c56373056282b40dd77e6a5557d9c88fdc5bb12f5db64f58fa3293200aaa52ba4f73eca509542d118266e54fc9294083d1084d3ac5a5780b75261dd8d4197f97cad4b1065117c971d30d6730c3f98472cf75ae561c222b4ca7ba480e36365c4901400bcceb7977a9a2788f2ed64ab88f74be1385d5d8b066f3561ea673d759a917fb12a63baf96a4460ddcd50d0afc41ef2ea2d2f8805e370c63d7bf59e3bffc8ccee1e076f47ecdeaf6f5bb397bb972c72c6d17d0551a11634c92f18c784c7d1fee997c7f03016ccacdfee2e2100442a7f1743ff5f21f4b4372ed6712e4fb6b2cf0890edca1dfa1263d904984745c97dab3be237b3b44485aafdd94a30c654ea72c187e5741e5e392504b5ad78f9ada817d45cf05e8c890e781e27a8260a993b1be62badf87374dfb53adebfb27acb9cdbd3020d11d64039b5625b4e479a74c2095d9c78d6052f9b3239bf0b8ae48eac1d48a63bbb829b59cce9c9914ce3a27c0fc83304263fbbae8d93b32e5f9f5bae0c8f79ab49cd13655c3f5ea875a438bbbe291e7a4eecaff5837a77a00bbc601edc043ff121ad00a9458b3e1092976e5604533c24048a7151438da444b9f47be8fe4c4ef71f3f095da243c6c18b739daaa2bd01b873026abd14b6631004fb1a7bdbf2372a0c80d662875c505b72064cd4520fd8a0539661038aedfe0123be625f45d7c5562f227fe4d579ee1b7dc0ebcb51bb50670d952bb278913aea7f7e8442f885c53ff97b47e118d915708bfb4aa1165351597c510e220838b873b617c5eee6e017cbc869af1c8114a7ed6bc8ed9d4c5dd41e06a91322f824f08a2f883be44d1b8ccaf3cc9d2d5f4f0456860a30d4e34daede670c600340623f473dc5e1782722be1e791bcf6ec7cfa46dc37b4442dcd6e00eee1ae549d3b13bf14c8de1494081d568d1df93f2575107b94805291d69fc79417dc8ca417fc8877da8d9c465b0f9b4fe56b954fd05d47107ba7e948fe9bb1b069e99c930d695212b7d146ad99beb0a5f438971901eff2d90959f8c9a3cf655f21366c5373044bd210b46154fce7f3f50a647173740f6d38c4d23872f3d63df249e0bf12f54312d75c704ed6e92333865c8aebb608ba7ba027f4740833c804dc5600047e4b106f73670c015b9c85a42b08b61153540dea9d6b37cca94f777ddd1e9c28c12f595bcff23353698c92e8587c24b2ebe10d17f31508472bea5c500f0d95205c22214fc8d4023a248a9304dfd5ae00ae821680a6541d700fd5e52c0b681edeb8499a68f56d89f181015eed3f1e52e549abc3eff738bc15feaa6dcfaab7df17ad63c165c82adc6a14656002824d40912872b3969c4515b55c42df3fdeb3e1267e280c8f2c097062ca11f535654c3a1ff2560354da6cfa5d02902aa65593bf37ef51a86af295d05be689e6cf7879f24101ac27e554fc869ac2992faa333eb17986ab4e54b9d80b90c857b8c5afe63a759a3631af2b8f954bf901b93fbab78236bc026eeb7bf0d89b31c7563aa4a464662cf410162694ccda467b990faa646fc7490133eefcd9515cc106cbccdfcf469b7618cd3a12ab01ef098542995832cfe0d975f5bbbfeafe4d76b447af4fa7c21331e9b378588788ad4b89c0a99ba5e59121310d9dbc07d17b5e7ed762e8920310a6c994193eb2fc62c547df9fceaaaf8514ccfacc92f0bc7a5ad062397fe780b1eda25406ce28cdeab9483f4de9f31340c52f95a70979a42c38ce6dc0266f6fd713fa22526b64bdb58f977ff62347fa8fbd2d69c268a34a0ff10bad8133738dfe5d656124ff72e8613285507ae654059658fe359ec0e299ccf5d1357e909ed3004ae3f25ecf61c2538e6309682e9882cd8303894367fcd643e4b8b15f33f24e9c37acf448f5d5e9a23e012db55cdb11b8da3140e326daf621d62e6e8e190ed6e23b596f6cb3ce11c4509744bd16c08f5890b92ba59683fad7d92cb8c8f5e31d85e994f195e2b35f06803eb8230650ab415e425827e06489e449d12eebb252b639e52e1bab08f3d37acad6fbb58084bac53f0024640c710665ef582f381cf25c9b6621e4ede19b37e865b72072471407ddd40ef11cdad163f2754c4c1f2398f4c1c3dbaf3bfc26eab4021dfa7929454e2721ae6318bff4553fb7ee85bf14762c433a801d61fb24b849b95edb5838138b3a621fcb2a4edbddfcc69388d3c827e52e080b94d1e4d698f50fd411133271c5512956721f6840c38c6584996eb569b87424865763b06159d8d30f5e07f3f22a3eede016e7dec531cf2b25d1a52f4e1c1264011795e0ad74b8ba06d9a2cccb885c8e8aad2845bf5eda1c095cf4a35135298ec16957342ccef4d8936b727f7819d98858806c86bb4f90ced7795cc86ab7d8366f597ebcad3fcf60e2e0d8502219ff3a191d18845a4f948195a2da84c61f30de0c3a37100d610fea31f2886aebd336115cdda3d8dfe8ae9cad67701a092739c6888749a3637eaf7c35f6e8c4092915f2d0796c42cda14832d97fe30b2d55f5f1b6c7a1cbbb571b87968d5369c4fb410f354caf51b79f131a1c985a40b9c578dcb62599531cc6964406e071c6db68aa5d9db39e4b8803d0c47d943883a149d84c4ca8dd8326f55223e47abcb6aff876a28e48bf07fb704b") mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x4000, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000000c0)=0x9, 0x4) 20:03:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000002000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00t\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', &(0x7f00000001c0)='./file0\x00', 0xa7, 0x8, &(0x7f0000000800)=[{&(0x7f0000000200)="e84bdb6a6e6cf3dd534aa1e4441a5218bbd9d73bc194efe1a4cf7fae9160417e5d173f1e63244cd3354c80879cfe09b648d559e6936d58217d39d1ff58d9198acb24b03ec9362cea98098da25d4f0d5f7413a67aeaf63c1855ff82e4007d66fa4d6f66000228c4a1fbee329a549e55ad87105ad98f6816639f9035cdec401087ee4e4303c7fd3abea9377e4f4973e6a113e6c844e1644bcc505b4646b057de6bfa", 0xa1, 0x5ada65a9}, {&(0x7f0000000300)="d43a01c208e7b680ba283eade9f260be894677d4a3d6b1735d26f8188aab2394c6eb7e487917b9d2", 0x28, 0x1}, {&(0x7f0000000340)="cdded073f1b1eeb4ff5d28ebbb06b6048fed289e914045c82112b7f75a628abf511587e7940a9dceca7f094e87673290f8642fbccd56454a03356e7e55162477eda8b575a6c9dd27e5816ba03caf1b2176e7b53b87d84641981ad0dbb9aa964a498072b003e4e3071d71f568a1d859a686b0d71f8356b367706dc3440624426ce86286f277c0a35063f2942dbe2e1b7461", 0x91, 0x87}, {&(0x7f0000000400)="82473de192c0b29d4d72fcb1af6c2a7a2e4233041f1bf54103e4d8cddd153b9c5924c8058518498fe596d9c97e501d34456992be5af1ba3d5f5f4d22bc412dc9dd9bd06e26943bef5dad5dcfcab62c509bbc49f9c3098916d871cde54a84451cceb25acf77614746a8598aceb6e755a5c38cc7fc8e02f220d49e595465fb973ab990de9dd4ce2590d04200e537297fe871243fad4176ee2f8905c3caadad2d3e8dc2815b410c195cb0725af01d2c8df21228ac9a815fef8a70b5175737d0ec29483a21449c24cc6ce6a0aafec059c2c982c068fb58d454f50d362ea5bde4a316ac3ca56995fd8f5fcf7908", 0xeb, 0x1}, {&(0x7f0000000500)="9851c526b003b59eae5198df12f7e176d18dadc906c2c77ebc1dc51a5fc538557d8a62195db0a703bad20b960098d250bf6cd51e73cf5b8eb0fc7d1bde71c844bcd1932875999d450bed6ff83b13705ebf91413ff138a359adbc88bd43568d7f96bfa1c0e8da450b346e29a3459467fe5bda2f90f5c927605f1b284d4c42578d5c914dc7abba2d4a6c7097fac8b9f190dc2343d5b249ff40992419d8b9d384851c", 0xa1, 0x9a}, {&(0x7f00000005c0)="9cb8e3a7271e0d310e000034a75da99a7c210b5336a54c2d7fd5d305daf8ec71a9ef0358d85aeace2b4e3ebffd6267060b372d14140441d8482c12f50a78e1efc6e16c7ac0dd22f3baaae9dbdca241cc748764ad6533a3d8fa8d62bf1c9dcf4d193554445bb6b8bcc8b3cf66785c688c797d607d981e25edaf24b1bbfd4e56035f5d3530a1f10013d5ac9acf60aae89ed92807f600742818135ccf4aefdfe56363ee89a2b6cf69fe3d7b8bfc8c1505ae3ed2ead0412f8dda06a3c5f297a9dfa9b829a8c59ecb60297f535d354c41bde4db541e74d79a037af525d2f9aeff2d3c3163eaa6661f92", 0xe7, 0xfffffffffffffffe}, {&(0x7f00000006c0)="eac1b42f0e23834e3715fd1212a94c62556547a1", 0x14, 0x1}, {&(0x7f0000000700)="ed010df062149dc9097f637018d03b9717d9a67442f31ec13eda069074c38fc61b7c5e65c7a259fe95c7e49f5779d01d6f135d56b6cc01a371e7a4f3a216a76ebde3370a5e191945cadd9fff8a646aa9d973e1a06def7aa1c6f170e68fe4e513e91231768dec79a727666d0851391cb83d3f1b90b3a05c65a7a9b8b962c2117c90975ca84c165c2226b7f00aed58e729a1a8068f4fa5837d3fb433a6debd16a2bc9ec3f7ae178239ccea444e202f25ee7e409b3a669e8d50cacc4613bd3aa40c658c7054c7a4c418efe11b1b56c343dc0404390713c87bdcedf1c49607d99869f42e875efcab580fd5b2ea23f1250a2030f3d65bf384", 0xf6, 0x1f}], 0x10000, &(0x7f0000000980)=ANY=[@ANYBLOB="7461696c73ff6f6e2c6461746a5d134ace4f7581f1fad1fded613d77726974656261636b2c65723d666c7573682c6772706a71756f74632c75737271756f74612c61636c2c6e6f7461696c2c75737271896f746161737572652c00"/106]) openat(r2, &(0x7f0000000940)='./file0\x00', 0x801, 0x40) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}, 0x10001, 0x0, 0x5}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r4, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r4, 0x1}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000080)) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00z\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000600", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:49 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:49 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 20:03:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000007000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:49 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 449.126405] REISERFS warning (device loop0): super-6505 reiserfs_getopt: head of option "tails" is only correct [ 449.126405] 20:03:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400f000", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\a\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000f000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:49 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34002c01", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\b\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}, 0x10001, 0x0, 0x5}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r4, 0x2}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001440)={r2, 0x1, 0x0, 0x7ff}) bind$bt_hci(r5, &(0x7f0000001480)={0x1f, 0x4, 0x4}, 0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r4, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={r4, @in={{0x2, 0x1, @broadcast}}, 0x0, 0x0, 0x2bf, 0x4, 0x6c}, 0x9c) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000001180)=@assoc_value={0x0, 0x3}, &(0x7f0000000240)=0xfffffffffffffd61) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f0000000180)="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") preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000f0000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:50 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:50 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 20:03:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000003", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r2, &(0x7f0000000040)="1520aa050089", 0x6) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x2}}, 0x18) 20:03:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:50 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000070000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:50 executing program 1: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00H\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000f0000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000005", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000300)={0x0, 0x200, 0x0, [0x9, 0x80000000, 0x6, 0xc24f, 0x40], [0x6, 0x688, 0x101, 0x3, 0x1, 0xffffffffffffff3e, 0xffffffff, 0x10001, 0x40, 0x7, 0x1, 0x3, 0x0, 0x8b1f, 0x64fc, 0x0, 0xfff, 0x5, 0x8000, 0x6, 0x8001, 0x8, 0x58c, 0x8000000000000, 0x1f, 0xff, 0x0, 0x7fff, 0xeb, 0x1000, 0xac1e, 0x7, 0x4, 0x100, 0x7, 0x1, 0x1, 0xfffffffffffffffc, 0x4, 0xfff, 0x3, 0x6, 0x7078a280, 0x3, 0x3, 0x5, 0x500000, 0x7fffffff, 0x4, 0x3, 0xffffffffffff3925, 0x4, 0xff, 0xfffffffffffffff9, 0x2, 0x2, 0x7f, 0x96, 0x800, 0x2, 0xffff, 0x6, 0x7, 0x7f, 0x100000001, 0x1, 0x5, 0x9, 0x7, 0x0, 0xd1, 0x13b, 0xff, 0xa866, 0x5, 0x7, 0x5afe, 0x9, 0x81, 0x5, 0x7, 0x4, 0x3, 0x0, 0x0, 0x100, 0x2, 0x0, 0x4, 0x2, 0x3ff, 0x9, 0x5, 0xfffffffffffffff9, 0x58fe, 0x5, 0x3, 0x81, 0x4, 0x2, 0x3f, 0x8001, 0x6, 0x5, 0x5, 0x1, 0x2, 0x32, 0x100000001, 0x8, 0x34180000000, 0x9, 0x5b, 0xd4d, 0x6, 0x779, 0x1ee, 0x10000, 0x7, 0x3, 0x6]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000740)={0x0, 0x1, {0x80, @struct={0x2, 0x6}, 0x0, 0x9, 0x2, 0x9, 0x397, 0x4, 0x30, @struct={0x7fff, 0x1}, 0x8, 0x80, [0x4, 0x8, 0x3, 0x112a553b, 0x1, 0x75]}, {0x81, @usage=0x100000000, 0x0, 0x2, 0x80, 0x3, 0xf9, 0x2, 0x42, @struct={0x8001, 0x7}, 0x7, 0xffffffff, [0x1490, 0x80, 0x2, 0x4, 0x6, 0x8]}, {0x0, @usage=0x10001, r2, 0x4, 0x5, 0x9, 0x3ff, 0x7, 0x412, @usage=0xdc57, 0x4, 0x1, [0xd1, 0x5, 0x2, 0x40, 0x63b, 0x3]}, {0x70, 0x8000, 0x417}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x10001, 0x0, 0x5}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r5, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r5, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={r5, @in={{0x2, 0x1, @broadcast}}, 0x0, 0x0, 0x2bf, 0x4, 0x6c}, 0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r5, 0x8001}, &(0x7f0000000240)=0x8) bind$bt_hci(r3, &(0x7f0000000080), 0x6) ioctl$TUNSETLINK(r3, 0x400454cd, 0xe49fb2a0f9073264) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000f00000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:50 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 20:03:50 executing program 1: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00L\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000400300e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000006", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:51 executing program 1: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\a', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 450.410600] nla_parse: 24 callbacks suppressed [ 450.410609] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:03:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) io_setup(0x1, &(0x7f0000000300)=0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dlm-control\x00', 0x20140, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000340)="e51fcc9b1d2308692021d667e3c9caad3b309697ab1e64845dbf38a12211b90a215f894e58d2242253409ba5dbc0e975fdac9fe2599ba6ea00e436e2d373c1b8fa2d7ba2c3b3ebdd5ed0071c7f2f2aa4209fafb99c707ed33275b457cad0f2644ef340f9302bf95ecec872b9", 0x6c, 0x8, 0x0, 0x2, r3}]) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/103, 0x67}], 0x1, 0x6, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x222080, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000700)) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001000)='/dev/dlm-monitor\x00', 0x3e202, 0x0) recvfrom$unix(r6, &(0x7f0000000580)=""/196, 0xc4, 0x0, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x3}) r7 = socket(0xa, 0xa, 0x80000) preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000000400)=""/211, 0xd3}], 0x2, 0x9, 0xfffffffe) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00`\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000034000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:51 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 450.677611] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:03:51 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000f", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000180)=0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x0, 0x1}, 0x6) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:51 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000fffff000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00h\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 451.004438] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:03:51 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x1, 0x4}, 0x17) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x181843, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00 ', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000001e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00l\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 451.172075] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:03:51 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000002e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bind$bt_hci(r0, &(0x7f00000022c0)={0x1f, 0x3, 0x1}, 0x6) preadv(r1, &(0x7f0000002280)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000080)=""/138, 0x8a}, {&(0x7f0000002180)=""/202, 0xca}], 0x4, 0xd9f, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002300)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000002400)={0x5, 0x15, 0x6, 0xd4df, 0xbc, 0x10000, &(0x7f0000002340)="682031ca96d4ceaf553e39e771298976a5973b896c7c95cd1ef532daa8cbc9a7c8dadd754118ce3bbd973ead3a676afb72487e2a8afa1cc9997958e9aa8c8abf155e8546987fbe45287a027be3dc622268c412400289d354476f33bd0a7df334b96e43d6c8bffab00c8eae195a4372be29e64c9cb843492913e67e0167800cf54d9de43826c13cd75b8eed1aa85bece4acbb0edf4b950c0ba4613729ed2b97ff2784a8e4a760156ebf78d008720af825d25b0acbacc3012530d075ca"}) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400012c", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00t\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:52 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:52 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:52 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 451.577945] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:03:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00H', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00z\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000007e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:52 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x48) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000200)={0x1, 0x2}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000006600010028bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000020001000000f3fff1fa08000b00d2c348c4612a57d7ad00000008000b000900008e510d8aaa0b002400000008000b0008000000d4e310fc1cb98c04e91cc42934ec005169362a53bad14ebb475a6306ba3f000000000000002c0c111f42100d2b8725f32964c205eefc519ea3627446d97c172cfed902d7680cff3bb27031d4d4fb4b7565cf9cbac64d72e1bed39c9860494399a9537a59000000000000"], 0x54}}, 0x0) preadv(r2, &(0x7f0000000280), 0x0, 0x5117, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) write(r3, &(0x7f0000000080)="c6c31426265f75fd76a8be2e821bdca71d5e39a2b87459d1d0f959896449ea660f5ee89b830784b820e043f8b69c15f42bd0f98c253a8b608ddc73054ca35e310f3f403cc5508cdc3fad3b085bc3598e70af57cced4473bc135f414bc65f", 0x5e) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:52 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 451.820905] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 451.834369] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:03:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400f000", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00L', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 451.907942] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 20:03:52 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000fe82000000009001f0070687931"], 0x34}}, 0x0) 20:03:52 executing program 0: r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{}, [@rose, @remote, @netrom, @remote, @rose, @netrom, @remote, @null]}, &(0x7f0000000100)=0x48) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000180)=""/128, &(0x7f0000000200)=0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r1, &(0x7f0000000040)="150005000000", 0x6) 20:03:52 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34002201", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00`', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 452.281921] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:03:52 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000f9a94784e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000003", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000180)=0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) recvmsg(r1, &(0x7f0000000540)={&(0x7f0000000240)=@ipx, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/107, 0x6b}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, &(0x7f0000000440)=""/196, 0xc4}, 0x8020) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$nl_route(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9cac523527bd4fa7fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000100004004001400140076657468315f746f5f626f6e64000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}, 0x10001, 0x0, 0x5}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r4, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r4, 0x1}, 0x0) setsockopt(r3, 0x1, 0x121, &(0x7f0000000580)="164c9b8a70c798891649945d8c6c3524570b030ed3437b22416096d5b83ec6ba2566458f6470478f2b4fc7864d83e08cb835242530851a3083b3aa1c7b6d2486dd8727e94db20695d68bc958c6a375f5270632dccbfedcace84544ac9edb9241ca17d60079915e90342e1f26ebf8a13fbb868cf20a100d15984c7ae585b71e92b86c822fbbb610f4712ec867ef9ee17dee3e6c5ca1cd5bead8cf88fad6264351e2a0725293117ce5ba34796fe6c42f901dafab6acf3f5cb05d0523448c3a166f54412b7ece03e658d8aa584a9c7cf6730119b87c7cff86c7ba5221eb2a865db0c59003db35f1d7fe62", 0xe9) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00h', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:53 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 452.501646] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:03:53 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) mmap(&(0x7f000070b000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x97b4e000) 20:03:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000ffffff9ee82000000009001f0070687931"], 0x34}}, 0x0) 20:03:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00l', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000005", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:53 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000180)=0x8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) mmap(&(0x7f0000422000/0x1000)=nil, 0x1000, 0x8, 0x100010, r2, 0xa5dba000) 20:03:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00t', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:53 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000fffffff0e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000006", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x3, @default, 0x6}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:53 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00z', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:53 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000008447a9f9e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\a', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:53 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x10001, 0x0, 0x5}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r2, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r2, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={r2, @in={{0x2, 0x1, @broadcast}}, 0x0, 0x0, 0x2bf, 0x4, 0x6c}, 0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x8001}, &(0x7f0000000240)=0x8) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000180)=0x8) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x0, 0xac44ef35a30011ee}, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000180)=0x8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000240)=0x81, &(0x7f0000000280)=0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0x6) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:54 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000f", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000f0ffffe82000000009001f0070687931"], 0x34}}, 0x0) 20:03:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000f0", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00 ', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:54 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000007fffffffe82000000009001f0070687931"], 0x34}}, 0x0) 20:03:54 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000180)=0x8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000000280)=""/185, 0xb9}, {&(0x7f0000000340)=""/151, 0x97}], 0x4, 0xd9f, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000180)=0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="8b862bedd0444650000000000000000000000000e3a391a29da8afee888ef320a52fd182742c407b2be893f413be97136dd542cefa0c4a2f4eb88189fb463ed69590fdc254cb42", @ANYRES32=0x0, @ANYBLOB="00080000410102002c0012800b00010069703667726500001c00028008000400040000000600020000000000060003000900000008000a9e", @ANYRES32=r4, @ANYBLOB="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"], 0x54}}, 0x0) mmap(&(0x7f00003e8000/0x4000)=nil, 0x4000, 0x3000000, 0x12, 0xffffffffffffffff, 0x7142b000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x10001, 0x0, 0x5}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r5, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r5, 0x1}, 0x0) bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0x1}, 0x6) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000122", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000009effffffe82000000009001f0070687931"], 0x34}}, 0x0) 20:03:54 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00@', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000280)=0x30) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80180, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x4}, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x72f, 0x4, [0x0, 0x7, 0x5, 0x20]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000380)={0x40, 0x200, 0x3f, 0x5, r4}, &(0x7f00000003c0)=0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000180)="150005000000ced0d66c677740bacfbf967e79f3ec639021b43eb85715a9259658b6b5c10c72a45696c84bb3073eb194feae8b4fdf456c98a92ddd221f6036ec4e8231bb335b88003964c7614be266af09e52e8586cef318d5dd9547dfdee2736a28e0b75d91690db5527a4c71d265472bd991c5572c69bfe5c54915fdba54440b23afabb70d04d13ec98ca07f6a7c4d396b1bb8885281fb355b73b982b5c2537818845e1b4772f977e75c0f1bbe14cc22d1537057995bd702706a96a5e2fc6526a5de1c9b11d37d920ea2ef585c8f7a0c3cbedf0f62abf56427b4637ed8d683299f1cfa000000000000", 0xea) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000080)) 20:03:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00H', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000f0ffffffe82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000003", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00L', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x10001, 0x0, 0x5}, &(0x7f0000000000)=0x98) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={r3, 0x800}, 0xfffffffffffffccb) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r3, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @broadcast}}, 0x0, 0x0, 0x2bf, 0x4, 0x6c}, 0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x8001}, &(0x7f0000000240)=0x8) r5 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x408540, 0x92) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000020000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:55 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00`', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000070000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:55 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00h', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0xee00, r3, 0x0) r4 = getpid() tkill(r4, 0x1a) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x44022, &(0x7f0000000440)=ANY=[@ANYBLOB="7472c26979f2f6616e733d7463702c706f721200000000000000303030040000003055cc6e24f78b1f00000000000000635cbcb3e814262fd7bec2f41579ab688c7971ebd6eee3f7c9cc78668c6a609fee71ab527004dc67a2888297780ff944a03c71053e9417824a69037a93977c0f24adf80b64f8de860fd2356b4e2a541ccd20fbce0014ef2fd5493c8c3d5513097669b0d3265ba22c0c21f5573bdb3c7ea6a6f0e8f7fdcec5f831", @ANYRESDEC=0xee01, @ANYBLOB=',loose,version=9p2000.u,cache=none,msize=0x000000000000008c,access=', @ANYRESDEC=r3, @ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f75736572d03d27292c7063723d3030303030303030239e5a08637cb8eb5c30303030999bc0ee30303030303031332c6d61736b3d4d41595f3534a12d306634302d313536352d376132332d66336600313861612c61707072616973652c7375626a5f72"]) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x10001, 0x0, 0x5}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r6, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={r6, 0x1}, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r5, 0x80106720, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x1, 0xda, &(0x7f00000002c0)="c056678d6eec5b80ec0ece3110c059b101dd6cd1026f422f7956366bbcb8470310ce3324d534fcd8bc088e66ed3f0ef97b73b94364d256e2f79d394647800886f622e63dababab7ba7c7e8c0d209c887a520ed8309de83158b00574e2d6e8cbf5c3eac87c9837ef8eca54a376f0cea733bca40712389fe65211e279f348c0eb7524d27b6e93b11b3e751c2418d8ac328767ca05ae420375345e2f2e01d8349991d8d5e28a977a7bc637d3be31a7a5a853ce4e5e22301dc052f0978c2d2f104f63d9fdc829ed1b8fffc209b9308e22e258ff865ae2333286bdfe8"}]}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) write(r7, &(0x7f0000000180)="157cd1caf024642b70f8de80cf99440437c5beb475", 0x15) 20:03:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000f0000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:55 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000f00000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00l', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000002f00)="ecef") mmap$snddsp_control(&(0x7f0000257000/0x1000)=nil, 0x1000, 0x2000001, 0x100010, r1, 0x83000000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2a6480, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0xb6, 0x2, 0x36, @ipv4={[], [], @multicast2}, @private0, 0x700, 0x8007, 0x0, 0x2}}) sendmsg$nl_route_sched(r2, &(0x7f0000002d80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f0000002d40)={&(0x7f0000000200)=ANY=[@ANYBLOB="082b00f02d000004ae03000000000000000a1200", @ANYRES32=r3, @ANYBLOB="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"], 0x2b08}, 0x1, 0x0, 0x0, 0x40800}, 0x200000c4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000002dc0)={0x4, [0x200, 0xffffffff, 0x8000], [{0x4, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x64, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x5f, 0x20, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x10001, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x180, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x92, 0x0, 0x1}, {0xcd, 0x9}, {0x8, 0x3f, 0x0, 0x0, 0x1}, {0x1, 0x7db, 0x1, 0x1, 0x1, 0x1}, {0x48, 0x9, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x4, 0x0, 0x0, 0x0, 0x1}, {0xfe, 0x57, 0x0, 0x0, 0x1}], 0x5}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002ec0)) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:55 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000700e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00t', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000f00e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0xc4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) write(r0, &(0x7f0000000040)="150005000000", 0x6) 20:03:55 executing program 5: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00z', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:56 executing program 5: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000f000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:56 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:56 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 455.515955] nla_parse: 21 callbacks suppressed [ 455.515965] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:03:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000f0", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:56 executing program 5: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 455.574844] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:03:56 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 455.655908] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:03:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:56 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:56 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000200e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 455.836646] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:03:56 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:56 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 455.891986] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 455.919337] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:03:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000700e82000000009001f0070687931"], 0x34}}, 0x0) [ 455.995985] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 456.043207] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 456.112423] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:03:56 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 20:03:56 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:56 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00@', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000f00e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:56 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 456.329571] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:03:57 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000003", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000f000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:57 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:57 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 20:03:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:57 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:57 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000007e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:57 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000fe82000000009001f0070687931"], 0x34}}, 0x0) 20:03:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:57 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:58 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:03:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000f0e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:58 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:58 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:58 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000002e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:58 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000007e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:58 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000fe82000000009001f0070687931"], 0x34}}, 0x0) 20:03:58 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:58 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:58 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, 0x0) 20:03:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e80d00000009001f0070687931"], 0x34}}, 0x0) 20:03:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:59 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, 0x0) 20:03:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82002000009001f0070687931"], 0x34}}, 0x0) 20:03:59 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:59 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, 0x0) 20:03:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82007000009001f0070687931"], 0x34}}, 0x0) 20:03:59 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:03:59 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e8200f000009001f0070687931"], 0x34}}, 0x0) 20:03:59 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={0x0}) 20:03:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:59 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:03:59 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={0x0}) 20:03:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e820f0000009001f0070687931"], 0x34}}, 0x0) 20:03:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:03:59 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:00 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:00 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={0x0}) 20:04:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000070009001f0070687931"], 0x34}}, 0x0) 20:04:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:00 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34008585", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e820000f0009001f0070687931"], 0x34}}, 0x0) 20:04:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50300}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @private}}}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') mmap(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x13, r1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4000) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd25, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x3a471b41988ffd0d) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) write(r3, &(0x7f0000000040)="1500050000008ddcf0a2282e312a9f0c5a39e646c589169efac1c11f67d4a8221103c0f3b5da250df637f68c6d0deefc8b7eaf4e20e13c80240f", 0x3a) 20:04:00 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400b5b2", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:00 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000f00009001f0070687931"], 0x34}}, 0x0) 20:04:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:00 executing program 0: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="150005000000", 0x6) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000180)="907122ec6adddcc03d45ce295c4f7c162af999c1e36947181058e91fb0ba141f59e6161fe46b17520e0269810c862a1cfb7888238ab79368aa2117745fa77044acc1094ea629ab4295b5b2587b1cdd7654cbe0e5548dafaae6bd0ce24ee4bf73854b994216e7016eedeaec6abe56227f2972dfefcd05420c3cdf45595e7ebde63092fa971fdfe3104905f16c0c23164f3233ae0f018b78b5503a505046f95a56d847de8efb5f1ef43ccf45505759d598b12e26f15d813307157c4edebec97d3824f3e5b5124ca34d5d296c98f6180a85faee5b9f3fade4") 20:04:00 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:00 executing program 1 (fault-call:3 fault-nth:0): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000020009001f0070687931"], 0x34}}, 0x0) 20:04:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340083d1", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:00 executing program 0: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 460.354778] FAULT_INJECTION: forcing a failure. [ 460.354778] name failslab, interval 1, probability 0, space 0, times 0 20:04:01 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 460.437510] CPU: 0 PID: 18330 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 460.445523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.454891] Call Trace: [ 460.457503] dump_stack+0x1fc/0x2ef [ 460.462105] should_fail.cold+0xa/0xf [ 460.465923] ? setup_fault_attr+0x200/0x200 [ 460.470348] ? lock_acquire+0x170/0x3c0 [ 460.474338] __should_failslab+0x115/0x180 [ 460.478589] should_failslab+0x5/0x10 [ 460.482402] __kmalloc_track_caller+0x2a6/0x3c0 [ 460.487169] ? strndup_user+0x70/0x120 [ 460.491072] memdup_user+0x22/0xb0 [ 460.494637] strndup_user+0x70/0x120 [ 460.498482] __keyctl_dh_compute+0x1b0/0x13d0 [ 460.503085] ? check_preemption_disabled+0x41/0x280 [ 460.508124] ? dh_data_from_key+0x2a0/0x2a0 [ 460.512461] ? proc_fail_nth_write+0x95/0x1d0 [ 460.517044] ? __might_fault+0x11f/0x1d0 [ 460.521131] ? lock_downgrade+0x720/0x720 [ 460.525290] ? lock_acquire+0x170/0x3c0 [ 460.529276] ? __might_fault+0xef/0x1d0 [ 460.533265] ? __might_fault+0x192/0x1d0 [ 460.537343] keyctl_dh_compute+0xbf/0x120 [ 460.541509] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 460.546410] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 460.551798] __se_sys_keyctl+0x10f/0x3f0 [ 460.555883] do_syscall_64+0xf9/0x620 [ 460.559693] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 460.564887] RIP: 0033:0x466459 [ 460.568090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:04:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000070009001f0070687931"], 0x34}}, 0x0) 20:04:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 460.587281] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 460.595110] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 460.602415] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 460.609808] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 460.617288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.624590] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:01 executing program 0: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 460.695249] nla_parse: 70 callbacks suppressed [ 460.695259] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:04:01 executing program 1 (fault-call:3 fault-nth:1): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:01 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:01 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e820000f0009001f0070687931"], 0x34}}, 0x0) [ 460.821119] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 460.866579] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 460.897317] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 460.912474] FAULT_INJECTION: forcing a failure. [ 460.912474] name failslab, interval 1, probability 0, space 0, times 0 [ 460.946903] CPU: 0 PID: 18383 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 460.954831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.964192] Call Trace: [ 460.966796] dump_stack+0x1fc/0x2ef [ 460.970446] should_fail.cold+0xa/0xf [ 460.974266] ? setup_fault_attr+0x200/0x200 [ 460.978602] ? lock_acquire+0x170/0x3c0 [ 460.982602] __should_failslab+0x115/0x180 [ 460.986865] should_failslab+0x5/0x10 [ 460.990687] __kmalloc+0x2ab/0x3c0 [ 460.994266] ? crypto_create_tfm+0x79/0x2e0 [ 460.998598] ? up_read+0x17/0x110 [ 461.002076] crypto_create_tfm+0x79/0x2e0 [ 461.006245] crypto_alloc_tfm+0xff/0x230 [ 461.010336] __keyctl_dh_compute+0x1e0/0x13d0 [ 461.014872] ? check_preemption_disabled+0x41/0x280 [ 461.019927] ? dh_data_from_key+0x2a0/0x2a0 [ 461.024308] ? proc_fail_nth_write+0x95/0x1d0 [ 461.028945] ? __might_fault+0x11f/0x1d0 [ 461.033037] ? lock_downgrade+0x720/0x720 [ 461.037838] ? lock_acquire+0x170/0x3c0 [ 461.041826] ? __might_fault+0xef/0x1d0 [ 461.046521] ? __might_fault+0x192/0x1d0 [ 461.050820] keyctl_dh_compute+0xbf/0x120 [ 461.055097] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 461.062107] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 461.069682] __se_sys_keyctl+0x10f/0x3f0 [ 461.074755] do_syscall_64+0xf9/0x620 [ 461.078584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.083790] RIP: 0033:0x466459 [ 461.087020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 461.105939] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 20:04:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000f00009001f0070687931"], 0x34}}, 0x0) 20:04:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:01 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000f0", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:01 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 461.113835] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 461.121115] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 461.128393] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 461.135682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.142984] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34007fff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 461.210165] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:04:01 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 461.253457] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.261280] could not allocate digest TFM handle vmac64(aes) 20:04:01 executing program 1 (fault-call:3 fault-nth:2): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:01 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000709001f0070687931"], 0x34}}, 0x0) [ 461.296866] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:04:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34009eff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:02 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:02 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 461.420972] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 461.437672] FAULT_INJECTION: forcing a failure. [ 461.437672] name failslab, interval 1, probability 0, space 0, times 0 [ 461.490506] CPU: 0 PID: 18418 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 461.498515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.507972] Call Trace: [ 461.511194] dump_stack+0x1fc/0x2ef [ 461.514851] should_fail.cold+0xa/0xf [ 461.518671] ? setup_fault_attr+0x200/0x200 [ 461.523161] ? lock_acquire+0x170/0x3c0 [ 461.527168] __should_failslab+0x115/0x180 [ 461.531506] should_failslab+0x5/0x10 [ 461.535328] __kmalloc+0x2ab/0x3c0 [ 461.538888] ? __crypto_alloc_tfm+0xc1/0x4e0 [ 461.543468] __crypto_alloc_tfm+0xc1/0x4e0 [ 461.548024] crypto_spawn_tfm+0xe6/0x1d0 [ 461.552895] ? vmac_exit_tfm+0x40/0x40 [ 461.556795] vmac_init_tfm+0x42/0xc0 [ 461.560527] ? vmac_exit_tfm+0x40/0x40 [ 461.564513] crypto_create_tfm+0x163/0x2e0 [ 461.568856] crypto_alloc_tfm+0xff/0x230 [ 461.570924] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 461.573040] __keyctl_dh_compute+0x1e0/0x13d0 [ 461.573061] ? check_preemption_disabled+0x41/0x280 [ 461.573083] ? dh_data_from_key+0x2a0/0x2a0 [ 461.573103] ? proc_fail_nth_write+0x95/0x1d0 [ 461.601402] ? __might_fault+0x11f/0x1d0 [ 461.605776] ? lock_downgrade+0x720/0x720 [ 461.610423] ? lock_acquire+0x170/0x3c0 [ 461.614448] ? __might_fault+0xef/0x1d0 [ 461.618446] ? __might_fault+0x192/0x1d0 [ 461.623159] keyctl_dh_compute+0xbf/0x120 [ 461.627328] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 461.633697] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 461.639261] __se_sys_keyctl+0x10f/0x3f0 [ 461.645172] do_syscall_64+0xf9/0x620 [ 461.650137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.657685] RIP: 0033:0x466459 [ 461.660975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 461.682081] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 20:04:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000f09001f0070687931"], 0x34}}, 0x0) 20:04:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e8200000f009001f0070687931"], 0x34}}, 0x0) [ 461.692360] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 461.701259] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 461.704609] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 461.708786] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 461.708795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.708804] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 [ 461.747209] could not allocate digest TFM handle vmac64(aes) 20:04:02 executing program 1 (fault-call:3 fault-nth:3): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:02 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400f0ff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000209001f0070687931"], 0x34}}, 0x0) [ 461.929121] FAULT_INJECTION: forcing a failure. [ 461.929121] name failslab, interval 1, probability 0, space 0, times 0 [ 461.973097] CPU: 0 PID: 18448 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 461.981015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.990377] Call Trace: [ 461.992984] dump_stack+0x1fc/0x2ef [ 461.996712] should_fail.cold+0xa/0xf [ 462.000526] ? setup_fault_attr+0x200/0x200 [ 462.004865] ? lock_acquire+0x170/0x3c0 [ 462.008854] __should_failslab+0x115/0x180 [ 462.013112] should_failslab+0x5/0x10 [ 462.016929] __kmalloc+0x2ab/0x3c0 [ 462.020482] ? __keyctl_dh_compute+0x29a/0x13d0 [ 462.025162] __keyctl_dh_compute+0x29a/0x13d0 [ 462.029668] ? check_preemption_disabled+0x41/0x280 [ 462.034699] ? dh_data_from_key+0x2a0/0x2a0 [ 462.039026] ? proc_fail_nth_write+0x95/0x1d0 [ 462.043545] ? __might_fault+0x11f/0x1d0 [ 462.047627] ? lock_downgrade+0x720/0x720 [ 462.051789] ? lock_acquire+0x170/0x3c0 [ 462.055798] ? __might_fault+0xef/0x1d0 [ 462.059785] ? __might_fault+0x192/0x1d0 [ 462.063861] keyctl_dh_compute+0xbf/0x120 [ 462.068022] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 462.072801] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 462.078220] __se_sys_keyctl+0x10f/0x3f0 [ 462.082301] do_syscall_64+0xf9/0x620 [ 462.086145] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 462.091351] RIP: 0033:0x466459 [ 462.094556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 462.113472] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 20:04:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34001dcd", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400fcff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000709001f0070687931"], 0x34}}, 0x0) [ 462.121199] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 462.128564] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 462.136054] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 462.143338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.150619] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:02 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:02 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:03 executing program 1 (fault-call:3 fault-nth:4): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000f09001f0070687931"], 0x34}}, 0x0) 20:04:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:03 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 462.545616] FAULT_INJECTION: forcing a failure. [ 462.545616] name failslab, interval 1, probability 0, space 0, times 0 [ 462.589026] CPU: 0 PID: 18502 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 462.596946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.606303] Call Trace: [ 462.608907] dump_stack+0x1fc/0x2ef [ 462.612560] should_fail.cold+0xa/0xf [ 462.616375] ? setup_fault_attr+0x200/0x200 [ 462.620709] ? lock_acquire+0x170/0x3c0 [ 462.624705] __should_failslab+0x115/0x180 [ 462.628955] should_failslab+0x5/0x10 [ 462.632767] __kmalloc_track_caller+0x2a6/0x3c0 [ 462.637445] ? dh_data_from_key+0x17e/0x2a0 [ 462.641807] kmemdup+0x23/0x50 [ 462.645015] dh_data_from_key+0x17e/0x2a0 [ 462.649657] __keyctl_dh_compute+0x329/0x13d0 [ 462.654170] ? check_preemption_disabled+0x41/0x280 [ 462.659206] ? dh_data_from_key+0x2a0/0x2a0 [ 462.663543] ? proc_fail_nth_write+0x95/0x1d0 [ 462.668077] ? __might_fault+0x11f/0x1d0 [ 462.672197] ? lock_downgrade+0x720/0x720 [ 462.676357] ? lock_acquire+0x170/0x3c0 [ 462.680348] ? __might_fault+0xef/0x1d0 [ 462.684350] ? __might_fault+0x192/0x1d0 [ 462.688439] keyctl_dh_compute+0xbf/0x120 [ 462.693472] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 462.698249] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 462.703716] __se_sys_keyctl+0x10f/0x3f0 [ 462.707789] do_syscall_64+0xf9/0x620 [ 462.711637] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 462.716837] RIP: 0033:0x466459 [ 462.720034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:04:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009021f0070687931"], 0x34}}, 0x0) 20:04:03 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009071f0070687931"], 0x34}}, 0x0) [ 462.738964] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 462.746688] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 462.753967] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 462.761888] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 462.769170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.776450] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:03 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:03 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2a4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x230, 0x33, @mgmt_frame=@probe_request={@wo_ht={{}, {0x1}, @broadcast, @device_a, @initial, {0x9, 0x1f}}, @void, @val={0x1, 0x2, [{0x30}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x3, 0x0, {0xfffffffffffffff9, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x749, 0x8}}, @void, [{0xdd, 0xa5, "2f3b8fca370fe1e7608a4c7dfc6ecc8c329ab6ac379215fbd9948d974fd2472e62fdf389fa95bcfecb1e5462a71f51d1e21626af43aa6d4fd3e0ec24f148a132ce2e6752bb282be9a5094f9a2e208fbb0fa2f2f8eb391b37a1be84c6a43e27a9835b6736bc0c0c8edee045bf9e07d4270900bcb9e13041d504bef657d15c1b7804b040a1f17af789eacd1a7764f21948f3289b98c6a58fdbabc83cfede722007831699d33a"}, {0xdd, 0x84, "80fd99dbc962a769ca0a0efa59a5d0e12d0e006d4691b834fe4792cda72a95777edc8b27c6f59f07de4f1673178bcdc2cfdb2ef7b28b57e078f5fa23df8a9c44dbbe2c29f1a868d5b4f544fd8f672bcf64470d0d23a280696845af803d6141cb697f4148d5567e78725b0002bfb617de1bd9afd78b1aff58fe4167296e784c81c44c5f2d"}, {0xdd, 0x62, "98e0139a0ff60568b4b23bece71a7e862944889a55788baeb3ec9d0c0bdcf279132adbf6cded62b860acc69cf7b804ab1fbae7b88b2f7e40dfb67669935e57527eed50af7d3f8bc6b5e4ef8eaebf7782d1028345cf670298d10822a4244c7c8fab0f"}, {0xdd, 0x10, "2e9e097a10c9b0c3281f16c8b7075314"}, {0xdd, 0x4f, "de6d98dbc4249d730cdb92da76d06b077096e25237c41d326461c7648213dd172572ae44cabe753ff9ccaf6342d5d487d85ab1b178f8adca9ceb3a633dee6719e8d88de596305c6d2880d26ca691bd"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @device_b}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:03 executing program 1 (fault-call:3 fault-nth:5): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e820000000090f1f0070687931"], 0x34}}, 0x0) 20:04:03 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 462.943708] FAULT_INJECTION: forcing a failure. [ 462.943708] name failslab, interval 1, probability 0, space 0, times 0 20:04:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0270687931"], 0x34}}, 0x0) [ 463.015981] CPU: 1 PID: 18531 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 463.023914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.033273] Call Trace: [ 463.035962] dump_stack+0x1fc/0x2ef [ 463.040040] should_fail.cold+0xa/0xf [ 463.043974] ? setup_fault_attr+0x200/0x200 [ 463.048323] ? lock_acquire+0x170/0x3c0 [ 463.052406] __should_failslab+0x115/0x180 [ 463.056658] should_failslab+0x5/0x10 [ 463.060475] __kmalloc_track_caller+0x2a6/0x3c0 [ 463.065167] ? dh_data_from_key+0x17e/0x2a0 [ 463.069515] kmemdup+0x23/0x50 [ 463.072811] dh_data_from_key+0x17e/0x2a0 [ 463.077012] __keyctl_dh_compute+0x4a1/0x13d0 [ 463.081567] ? check_preemption_disabled+0x41/0x280 [ 463.086642] ? dh_data_from_key+0x2a0/0x2a0 [ 463.090980] ? proc_fail_nth_write+0x95/0x1d0 [ 463.095518] ? __might_fault+0x11f/0x1d0 [ 463.099776] ? lock_downgrade+0x720/0x720 [ 463.103939] ? lock_acquire+0x170/0x3c0 [ 463.108496] ? __might_fault+0xef/0x1d0 [ 463.112518] ? __might_fault+0x192/0x1d0 [ 463.116692] keyctl_dh_compute+0xbf/0x120 [ 463.120851] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 463.125654] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 463.131061] __se_sys_keyctl+0x10f/0x3f0 [ 463.135245] do_syscall_64+0xf9/0x620 [ 463.139082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 463.144278] RIP: 0033:0x466459 [ 463.147480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:04:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0770687931"], 0x34}}, 0x0) 20:04:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000f0", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 463.166409] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 463.175439] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 463.182718] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 463.189995] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 463.197274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.204552] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0f70687931"], 0x34}}, 0x0) 20:04:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34007fff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:03 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:04 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:04 executing program 1 (fault-call:3 fault-nth:6): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0xf}}, 0x0) 20:04:04 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34009eff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 463.513095] FAULT_INJECTION: forcing a failure. [ 463.513095] name failslab, interval 1, probability 0, space 0, times 0 20:04:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:04 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 463.568381] CPU: 1 PID: 18574 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 463.576300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.585741] Call Trace: [ 463.588377] dump_stack+0x1fc/0x2ef [ 463.592040] should_fail.cold+0xa/0xf [ 463.595862] ? setup_fault_attr+0x200/0x200 [ 463.600203] ? lock_acquire+0x170/0x3c0 [ 463.604202] __should_failslab+0x115/0x180 [ 463.608453] should_failslab+0x5/0x10 [ 463.612263] __kmalloc_track_caller+0x2a6/0x3c0 [ 463.616946] ? dh_data_from_key+0x17e/0x2a0 [ 463.622173] kmemdup+0x23/0x50 [ 463.625385] dh_data_from_key+0x17e/0x2a0 [ 463.630159] __keyctl_dh_compute+0x4d3/0x13d0 [ 463.634677] ? check_preemption_disabled+0x41/0x280 [ 463.639725] ? dh_data_from_key+0x2a0/0x2a0 [ 463.644144] ? proc_fail_nth_write+0x95/0x1d0 [ 463.648664] ? __might_fault+0x11f/0x1d0 [ 463.652781] ? lock_downgrade+0x720/0x720 [ 463.656947] ? lock_acquire+0x170/0x3c0 [ 463.660941] ? __might_fault+0xef/0x1d0 [ 463.664971] ? __might_fault+0x192/0x1d0 [ 463.669052] keyctl_dh_compute+0xbf/0x120 [ 463.673242] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 463.678022] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 463.683433] __se_sys_keyctl+0x10f/0x3f0 [ 463.687513] do_syscall_64+0xf9/0x620 [ 463.691342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 463.696541] RIP: 0033:0x466459 [ 463.699766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:04:04 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400f0ff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 463.718778] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 463.726528] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 463.733808] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 463.741183] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 463.748461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.755769] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0xc0}}, 0x0) 20:04:04 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x34008800) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:04 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400fcff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0xec0}}, 0x0) 20:04:04 executing program 1 (fault-call:3 fault-nth:7): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 464.186577] FAULT_INJECTION: forcing a failure. [ 464.186577] name failslab, interval 1, probability 0, space 0, times 0 [ 464.232391] CPU: 0 PID: 18618 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 464.240325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.249691] Call Trace: [ 464.252313] dump_stack+0x1fc/0x2ef [ 464.255973] should_fail.cold+0xa/0xf [ 464.259797] ? setup_fault_attr+0x200/0x200 [ 464.264131] ? lock_acquire+0x170/0x3c0 [ 464.268269] __should_failslab+0x115/0x180 [ 464.272605] should_failslab+0x5/0x10 [ 464.276421] __kmalloc+0x2ab/0x3c0 [ 464.279971] ? __keyctl_dh_compute+0x512/0x13d0 [ 464.284650] __keyctl_dh_compute+0x512/0x13d0 [ 464.289162] ? dh_data_from_key+0x2a0/0x2a0 [ 464.293768] ? proc_fail_nth_write+0x95/0x1d0 [ 464.298286] ? __might_fault+0x11f/0x1d0 [ 464.302361] ? lock_downgrade+0x720/0x720 [ 464.306518] ? lock_acquire+0x170/0x3c0 [ 464.310798] ? __might_fault+0xef/0x1d0 [ 464.314784] ? __might_fault+0x192/0x1d0 [ 464.318860] keyctl_dh_compute+0xbf/0x120 [ 464.323024] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 464.327797] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 464.334214] __se_sys_keyctl+0x10f/0x3f0 [ 464.338285] do_syscall_64+0xf9/0x620 [ 464.342095] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 464.347286] RIP: 0033:0x466459 [ 464.350482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 464.369415] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 20:04:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x33fe0}}, 0x0) 20:04:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:05 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 464.377136] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 464.384404] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 464.391678] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 464.398952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.407092] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x200000f4}}, 0x0) 20:04:05 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:05 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x7ffff000}}, 0x0) 20:04:05 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:05 executing program 1 (fault-call:3 fault-nth:8): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0xfffffdef}}, 0x0) 20:04:05 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 464.792867] FAULT_INJECTION: forcing a failure. [ 464.792867] name failslab, interval 1, probability 0, space 0, times 0 20:04:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 464.862714] CPU: 1 PID: 18667 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 464.870649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.880019] Call Trace: [ 464.882829] dump_stack+0x1fc/0x2ef [ 464.886509] should_fail.cold+0xa/0xf [ 464.890416] ? setup_fault_attr+0x200/0x200 [ 464.894753] ? lock_acquire+0x170/0x3c0 [ 464.898892] __should_failslab+0x115/0x180 [ 464.903150] should_failslab+0x5/0x10 [ 464.906962] __kmalloc+0x2ab/0x3c0 [ 464.910509] ? crypto_create_tfm+0x79/0x2e0 [ 464.914848] ? up_read+0x17/0x110 [ 464.918318] crypto_create_tfm+0x79/0x2e0 [ 464.922484] crypto_alloc_tfm+0xff/0x230 [ 464.926650] __keyctl_dh_compute+0x55c/0x13d0 [ 464.931255] ? dh_data_from_key+0x2a0/0x2a0 [ 464.935589] ? proc_fail_nth_write+0x95/0x1d0 [ 464.940112] ? __might_fault+0x11f/0x1d0 [ 464.944203] ? lock_downgrade+0x720/0x720 [ 464.948362] ? lock_acquire+0x170/0x3c0 [ 464.952344] ? __might_fault+0xef/0x1d0 [ 464.956332] ? __might_fault+0x192/0x1d0 [ 464.960411] keyctl_dh_compute+0xbf/0x120 [ 464.964657] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 464.969430] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 464.974806] __se_sys_keyctl+0x10f/0x3f0 [ 464.978917] do_syscall_64+0xf9/0x620 [ 464.982732] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 464.987930] RIP: 0033:0x466459 [ 464.991145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:04:05 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 465.010324] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 465.018142] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 465.025421] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 465.032712] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 465.039993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.047282] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x8}, 0x0) 20:04:05 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0xffffff1f}, 0x0) 20:04:05 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:05 executing program 1 (fault-call:3 fault-nth:9): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:06 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:06 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 465.468327] FAULT_INJECTION: forcing a failure. [ 465.468327] name failslab, interval 1, probability 0, space 0, times 0 20:04:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x2}, 0x0) [ 465.551782] CPU: 1 PID: 18705 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 465.559731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.569100] Call Trace: [ 465.571705] dump_stack+0x1fc/0x2ef [ 465.575362] should_fail.cold+0xa/0xf [ 465.579193] ? setup_fault_attr+0x200/0x200 [ 465.583538] ? lock_acquire+0x170/0x3c0 [ 465.587551] __should_failslab+0x115/0x180 [ 465.591798] should_failslab+0x5/0x10 [ 465.595610] kmem_cache_alloc_trace+0x284/0x380 20:04:06 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 465.600415] ? crypto_dh_decode_key+0x36c/0x4a0 [ 465.605102] mpi_alloc+0x43/0x240 [ 465.608575] mpi_read_raw_data+0xd9/0x3f0 [ 465.612734] ? mpi_free+0x10/0x150 [ 465.616288] dh_set_secret+0xe8/0x2a0 [ 465.620196] ? dh_compute_value+0x5c0/0x5c0 [ 465.624541] ? crypto_alloc_tfm+0x123/0x230 [ 465.628998] __keyctl_dh_compute+0x5e3/0x13d0 [ 465.633612] ? dh_data_from_key+0x2a0/0x2a0 [ 465.638042] ? proc_fail_nth_write+0x95/0x1d0 [ 465.642570] ? __might_fault+0x11f/0x1d0 [ 465.646653] ? lock_downgrade+0x720/0x720 20:04:06 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 465.650903] ? lock_acquire+0x170/0x3c0 [ 465.654890] ? __might_fault+0xef/0x1d0 [ 465.658881] ? __might_fault+0x192/0x1d0 [ 465.662963] keyctl_dh_compute+0xbf/0x120 [ 465.667215] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 465.671993] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 465.677652] __se_sys_keyctl+0x10f/0x3f0 [ 465.681725] do_syscall_64+0xf9/0x620 [ 465.685537] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 465.690998] RIP: 0033:0x466459 [ 465.694208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 465.714651] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 465.722376] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 465.722876] nla_parse: 44 callbacks suppressed [ 465.722885] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 465.729653] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 20:04:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 465.729663] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 465.729670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.729679] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:06 executing program 1 (fault-call:3 fault-nth:10): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:06 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:06 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 465.886876] FAULT_INJECTION: forcing a failure. [ 465.886876] name failslab, interval 1, probability 0, space 0, times 0 [ 465.897692] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 465.926152] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 465.939169] CPU: 1 PID: 18743 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 465.947989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.957551] Call Trace: [ 465.960156] dump_stack+0x1fc/0x2ef [ 465.961947] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 465.964661] should_fail.cold+0xa/0xf [ 465.964687] ? setup_fault_attr+0x200/0x200 [ 465.982911] ? lock_acquire+0x170/0x3c0 [ 465.986948] __should_failslab+0x115/0x180 [ 465.991391] should_failslab+0x5/0x10 [ 465.995553] __kmalloc+0x2ab/0x3c0 [ 465.999372] ? mpi_alloc_limb_space+0x2f/0x50 [ 466.005294] mpi_alloc_limb_space+0x2f/0x50 [ 466.009642] mpi_alloc+0x1a3/0x240 [ 466.013549] mpi_read_raw_data+0xd9/0x3f0 [ 466.018151] ? mpi_free+0x10/0x150 [ 466.021824] dh_set_secret+0xe8/0x2a0 [ 466.025633] ? dh_compute_value+0x5c0/0x5c0 [ 466.029972] ? crypto_alloc_tfm+0x123/0x230 [ 466.034332] __keyctl_dh_compute+0x5e3/0x13d0 20:04:06 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 466.038851] ? dh_data_from_key+0x2a0/0x2a0 [ 466.043289] ? proc_fail_nth_write+0x95/0x1d0 [ 466.047824] ? __might_fault+0x11f/0x1d0 [ 466.051906] ? lock_downgrade+0x720/0x720 [ 466.056078] ? lock_acquire+0x170/0x3c0 [ 466.060071] ? __might_fault+0xef/0x1d0 [ 466.064069] ? __might_fault+0x192/0x1d0 [ 466.069077] keyctl_dh_compute+0xbf/0x120 [ 466.073253] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 466.078035] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 466.083415] __se_sys_keyctl+0x10f/0x3f0 20:04:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:06 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x7}, 0x0) [ 466.087488] do_syscall_64+0xf9/0x620 [ 466.091306] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 466.091319] RIP: 0033:0x466459 [ 466.091333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:04:06 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 466.091340] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 466.091354] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 466.091361] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 466.091369] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 466.091377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.091386] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 [ 466.126944] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:04:06 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:06 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 466.322774] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:04:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xf}, 0x0) [ 466.425386] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 466.437342] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:04:07 executing program 1 (fault-call:3 fault-nth:11): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:07 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:07 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xf0}, 0x0) [ 466.476680] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:04:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:07 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 466.541364] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 466.573001] FAULT_INJECTION: forcing a failure. [ 466.573001] name failslab, interval 1, probability 0, space 0, times 0 20:04:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:07 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 466.662718] CPU: 0 PID: 18792 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 466.670655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.680128] Call Trace: [ 466.682732] dump_stack+0x1fc/0x2ef [ 466.686409] should_fail.cold+0xa/0xf [ 466.690228] ? setup_fault_attr+0x200/0x200 [ 466.694586] ? lock_acquire+0x170/0x3c0 [ 466.698665] __should_failslab+0x115/0x180 [ 466.702927] should_failslab+0x5/0x10 [ 466.706743] kmem_cache_alloc_trace+0x284/0x380 [ 466.711426] mpi_alloc+0x43/0x240 [ 466.715013] mpi_read_raw_data+0xd9/0x3f0 [ 466.719291] dh_set_secret+0x146/0x2a0 [ 466.723199] ? dh_compute_value+0x5c0/0x5c0 [ 466.727545] ? crypto_alloc_tfm+0x123/0x230 [ 466.731887] __keyctl_dh_compute+0x5e3/0x13d0 [ 466.736790] ? dh_data_from_key+0x2a0/0x2a0 [ 466.741128] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 466.745905] ? __might_fault+0x11f/0x1d0 [ 466.749987] ? lock_downgrade+0x720/0x720 [ 466.754145] ? lock_acquire+0x170/0x3c0 [ 466.758132] ? __might_fault+0xef/0x1d0 [ 466.762125] ? __might_fault+0x192/0x1d0 [ 466.766205] keyctl_dh_compute+0xbf/0x120 [ 466.770373] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 466.775154] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 466.780552] __se_sys_keyctl+0x10f/0x3f0 [ 466.784631] do_syscall_64+0xf9/0x620 [ 466.788479] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 466.793688] RIP: 0033:0x466459 20:04:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x700}, 0x0) 20:04:07 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 466.796908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 466.816016] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 466.823824] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 466.831108] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 466.838533] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 466.845820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.853720] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:07 executing program 1 (fault-call:3 fault-nth:12): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xf00}, 0x0) 20:04:07 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:07 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:07 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xf000}, 0x0) 20:04:07 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 467.016652] FAULT_INJECTION: forcing a failure. [ 467.016652] name failslab, interval 1, probability 0, space 0, times 0 20:04:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 467.122002] CPU: 1 PID: 18834 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 467.130067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.139703] Call Trace: [ 467.142398] dump_stack+0x1fc/0x2ef [ 467.146172] should_fail.cold+0xa/0xf [ 467.149992] ? setup_fault_attr+0x200/0x200 [ 467.154320] ? lock_acquire+0x170/0x3c0 [ 467.158323] __should_failslab+0x115/0x180 [ 467.162569] should_failslab+0x5/0x10 [ 467.166383] __kmalloc+0x2ab/0x3c0 20:04:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 467.169933] ? mpi_alloc_limb_space+0x2f/0x50 [ 467.174446] mpi_alloc_limb_space+0x2f/0x50 [ 467.179252] mpi_alloc+0x1a3/0x240 [ 467.182812] mpi_read_raw_data+0xd9/0x3f0 [ 467.186989] dh_set_secret+0x146/0x2a0 [ 467.190893] ? dh_compute_value+0x5c0/0x5c0 [ 467.195330] ? crypto_alloc_tfm+0x123/0x230 [ 467.199670] __keyctl_dh_compute+0x5e3/0x13d0 [ 467.204628] ? dh_data_from_key+0x2a0/0x2a0 [ 467.208968] ? proc_fail_nth_write+0x95/0x1d0 [ 467.213493] ? __might_fault+0x11f/0x1d0 [ 467.217584] ? lock_downgrade+0x720/0x720 [ 467.221758] ? lock_acquire+0x170/0x3c0 [ 467.225771] ? __might_fault+0xef/0x1d0 [ 467.229792] ? __might_fault+0x192/0x1d0 [ 467.233892] keyctl_dh_compute+0xbf/0x120 [ 467.238079] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 467.242981] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 467.248647] __se_sys_keyctl+0x10f/0x3f0 [ 467.252727] do_syscall_64+0xf9/0x620 [ 467.256536] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.261735] RIP: 0033:0x466459 [ 467.264943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 467.284461] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 467.292212] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 467.299491] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 467.306863] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 467.314234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 20:04:07 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 467.321517] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:08 executing program 1 (fault-call:3 fault-nth:13): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x34000}, 0x0) 20:04:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:08 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:08 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 467.488027] FAULT_INJECTION: forcing a failure. [ 467.488027] name failslab, interval 1, probability 0, space 0, times 0 [ 467.522081] CPU: 0 PID: 18871 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 467.530146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.540173] Call Trace: [ 467.543036] dump_stack+0x1fc/0x2ef [ 467.546851] should_fail.cold+0xa/0xf [ 467.551538] ? setup_fault_attr+0x200/0x200 [ 467.555877] ? lock_acquire+0x170/0x3c0 [ 467.559969] __should_failslab+0x115/0x180 [ 467.564222] should_failslab+0x5/0x10 [ 467.568040] kmem_cache_alloc_trace+0x284/0x380 [ 467.572725] mpi_alloc+0x43/0x240 [ 467.576198] mpi_read_raw_data+0xd9/0x3f0 [ 467.580376] dh_set_secret+0x185/0x2a0 [ 467.584305] ? dh_compute_value+0x5c0/0x5c0 [ 467.589088] ? crypto_alloc_tfm+0x123/0x230 [ 467.595472] __keyctl_dh_compute+0x5e3/0x13d0 [ 467.601427] ? dh_data_from_key+0x2a0/0x2a0 [ 467.607173] ? proc_fail_nth_write+0x95/0x1d0 [ 467.611718] ? __might_fault+0x11f/0x1d0 [ 467.616422] ? lock_downgrade+0x720/0x720 [ 467.620847] ? lock_acquire+0x170/0x3c0 [ 467.625040] ? __might_fault+0xef/0x1d0 [ 467.629119] ? __might_fault+0x192/0x1d0 [ 467.633296] keyctl_dh_compute+0xbf/0x120 [ 467.637484] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 467.642436] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 467.647915] __se_sys_keyctl+0x10f/0x3f0 [ 467.651996] do_syscall_64+0xf9/0x620 [ 467.655817] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.661030] RIP: 0033:0x466459 [ 467.664845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:04:08 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x400300}, 0x0) 20:04:08 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:08 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xf0ffff}, 0x0) [ 467.684366] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 467.692387] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 467.701369] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 467.708653] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 467.716022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.723677] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:08 executing program 1 (fault-call:3 fault-nth:14): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:08 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:08 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x1000000}, 0x0) 20:04:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:08 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 467.962632] FAULT_INJECTION: forcing a failure. [ 467.962632] name failslab, interval 1, probability 0, space 0, times 0 [ 468.020377] CPU: 0 PID: 18912 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 468.028659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.038031] Call Trace: [ 468.040740] dump_stack+0x1fc/0x2ef [ 468.044671] should_fail.cold+0xa/0xf [ 468.049015] ? setup_fault_attr+0x200/0x200 [ 468.053373] ? lock_acquire+0x170/0x3c0 [ 468.057832] __should_failslab+0x115/0x180 [ 468.062116] should_failslab+0x5/0x10 [ 468.065934] __kmalloc+0x2ab/0x3c0 [ 468.069650] ? mpi_alloc_limb_space+0x2f/0x50 [ 468.074213] mpi_alloc_limb_space+0x2f/0x50 [ 468.078557] mpi_alloc+0x1a3/0x240 [ 468.083191] mpi_read_raw_data+0xd9/0x3f0 [ 468.087932] dh_set_secret+0x185/0x2a0 [ 468.092475] ? dh_compute_value+0x5c0/0x5c0 [ 468.097620] ? crypto_alloc_tfm+0x123/0x230 [ 468.102411] __keyctl_dh_compute+0x5e3/0x13d0 [ 468.106939] ? dh_data_from_key+0x2a0/0x2a0 [ 468.111465] ? proc_fail_nth_write+0x95/0x1d0 [ 468.115987] ? __might_fault+0x11f/0x1d0 [ 468.120251] ? lock_downgrade+0x720/0x720 [ 468.125023] ? lock_acquire+0x170/0x3c0 [ 468.129014] ? __might_fault+0xef/0x1d0 [ 468.133196] ? __might_fault+0x192/0x1d0 [ 468.138462] keyctl_dh_compute+0xbf/0x120 [ 468.143118] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 468.148205] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 468.153690] __se_sys_keyctl+0x10f/0x3f0 [ 468.157799] do_syscall_64+0xf9/0x620 [ 468.161627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 468.167270] RIP: 0033:0x466459 [ 468.170478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 468.189947] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 468.197881] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 468.206036] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 468.213343] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 20:04:08 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:08 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 468.220800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.228186] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:08 executing program 1 (fault-call:3 fault-nth:15): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:08 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x2000000}, 0x0) 20:04:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:08 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 468.384089] FAULT_INJECTION: forcing a failure. [ 468.384089] name failslab, interval 1, probability 0, space 0, times 0 [ 468.419658] CPU: 1 PID: 18946 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 468.427594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.437055] Call Trace: [ 468.439668] dump_stack+0x1fc/0x2ef [ 468.443320] should_fail.cold+0xa/0xf [ 468.447140] ? setup_fault_attr+0x200/0x200 [ 468.451476] ? lock_acquire+0x170/0x3c0 [ 468.455474] __should_failslab+0x115/0x180 [ 468.459728] should_failslab+0x5/0x10 [ 468.463544] __kmalloc+0x2ab/0x3c0 [ 468.467105] ? __keyctl_dh_compute+0x69e/0x13d0 [ 468.471812] __keyctl_dh_compute+0x69e/0x13d0 [ 468.476332] ? dh_data_from_key+0x2a0/0x2a0 [ 468.480665] ? proc_fail_nth_write+0x95/0x1d0 [ 468.487878] ? __might_fault+0x11f/0x1d0 [ 468.491961] ? lock_downgrade+0x720/0x720 [ 468.496125] ? lock_acquire+0x170/0x3c0 [ 468.500122] ? __might_fault+0xef/0x1d0 [ 468.504294] ? __might_fault+0x192/0x1d0 [ 468.508824] keyctl_dh_compute+0xbf/0x120 [ 468.513013] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 468.517899] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 468.523304] __se_sys_keyctl+0x10f/0x3f0 [ 468.527388] do_syscall_64+0xf9/0x620 [ 468.531222] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 468.536531] RIP: 0033:0x466459 [ 468.539748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 468.558848] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 468.566745] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 468.574026] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 20:04:09 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x7000000}, 0x0) 20:04:09 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 468.581315] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 468.588618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.595896] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xf000000}, 0x0) 20:04:09 executing program 1 (fault-call:3 fault-nth:16): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:09 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x8447a9f9}, 0x0) [ 468.977591] FAULT_INJECTION: forcing a failure. [ 468.977591] name failslab, interval 1, probability 0, space 0, times 0 [ 469.012381] CPU: 1 PID: 18996 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 469.020302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.029663] Call Trace: [ 469.032280] dump_stack+0x1fc/0x2ef [ 469.035920] should_fail.cold+0xa/0xf [ 469.039737] ? setup_fault_attr+0x200/0x200 [ 469.044078] ? lock_acquire+0x170/0x3c0 [ 469.048087] __should_failslab+0x115/0x180 [ 469.052357] should_failslab+0x5/0x10 [ 469.056176] __kmalloc+0x2ab/0x3c0 [ 469.059731] ? __keyctl_dh_compute+0x725/0x13d0 [ 469.064596] ? sg_init_one+0xd9/0x180 [ 469.068417] __keyctl_dh_compute+0x725/0x13d0 [ 469.072940] ? dh_data_from_key+0x2a0/0x2a0 [ 469.078262] ? proc_fail_nth_write+0x95/0x1d0 [ 469.082878] ? __might_fault+0x11f/0x1d0 [ 469.086964] ? lock_downgrade+0x720/0x720 [ 469.091134] ? lock_acquire+0x170/0x3c0 [ 469.095137] ? __might_fault+0xef/0x1d0 [ 469.099141] ? __might_fault+0x192/0x1d0 [ 469.103224] keyctl_dh_compute+0xbf/0x120 [ 469.107413] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 469.112198] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 469.117604] __se_sys_keyctl+0x10f/0x3f0 [ 469.121682] do_syscall_64+0xf9/0x620 [ 469.125507] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 469.130711] RIP: 0033:0x466459 [ 469.133909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 469.152818] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 469.160538] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 469.167819] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 20:04:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x9effffff}, 0x0) [ 469.175213] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 469.182492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.189775] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:09 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:09 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:09 executing program 1 (fault-call:3 fault-nth:17): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xf0ffffff}, 0x0) [ 469.382685] FAULT_INJECTION: forcing a failure. [ 469.382685] name failslab, interval 1, probability 0, space 0, times 0 [ 469.424899] CPU: 0 PID: 19019 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 469.434233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.444499] Call Trace: [ 469.447138] dump_stack+0x1fc/0x2ef [ 469.451999] should_fail.cold+0xa/0xf [ 469.455987] ? setup_fault_attr+0x200/0x200 [ 469.460499] ? lock_acquire+0x170/0x3c0 [ 469.464490] __should_failslab+0x115/0x180 [ 469.468737] should_failslab+0x5/0x10 [ 469.472552] kmem_cache_alloc_trace+0x284/0x380 [ 469.477318] ? should_fail+0x142/0x7b0 [ 469.482189] mpi_alloc+0x43/0x240 [ 469.485735] dh_compute_value+0x8b/0x5c0 [ 469.489844] ? dh_exit_tfm+0x20/0x20 [ 469.493847] ? __lockdep_init_map+0x100/0x5a0 [ 469.498472] ? __lockdep_init_map+0x100/0x5a0 [ 469.503084] __keyctl_dh_compute+0x953/0x13d0 [ 469.508311] ? dh_data_from_key+0x2a0/0x2a0 [ 469.513179] ? proc_fail_nth_write+0x95/0x1d0 [ 469.517794] ? __might_fault+0x11f/0x1d0 [ 469.521961] ? __might_fault+0xef/0x1d0 [ 469.525957] ? __might_fault+0x192/0x1d0 [ 469.530041] keyctl_dh_compute+0xbf/0x120 [ 469.534208] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 469.539078] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 469.544477] __se_sys_keyctl+0x10f/0x3f0 [ 469.548557] do_syscall_64+0xf9/0x620 [ 469.552374] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 469.557746] RIP: 0033:0x466459 20:04:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:10 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xf9a94784}, 0x0) 20:04:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 469.560953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 469.579950] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 469.587668] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 469.594943] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 469.602243] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 469.609608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.616891] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000f0", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:10 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xfffff000}, 0x0) 20:04:10 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:10 executing program 1 (fault-call:3 fault-nth:18): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000002", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xffffff7f}, 0x0) [ 470.111583] FAULT_INJECTION: forcing a failure. [ 470.111583] name failslab, interval 1, probability 0, space 0, times 0 20:04:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000003", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:10 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 470.208403] CPU: 1 PID: 19081 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 470.216343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.225838] Call Trace: [ 470.228461] dump_stack+0x1fc/0x2ef [ 470.232121] should_fail.cold+0xa/0xf [ 470.235943] ? setup_fault_attr+0x200/0x200 [ 470.240369] ? lock_acquire+0x170/0x3c0 [ 470.244560] __should_failslab+0x115/0x180 [ 470.248997] should_failslab+0x5/0x10 [ 470.252819] __kmalloc+0x2ab/0x3c0 [ 470.256404] ? mpi_alloc_limb_space+0x2f/0x50 [ 470.261969] mpi_alloc_limb_space+0x2f/0x50 [ 470.266309] mpi_powm+0x43d/0x1a30 [ 470.269867] ? should_fail+0x142/0x7b0 [ 470.273949] ? fs_reclaim_release+0xd0/0x110 [ 470.279074] ? setup_fault_attr+0x200/0x200 [ 470.283419] ? lock_acquire+0x170/0x3c0 [ 470.287414] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 470.292626] ? mpi_alloc+0x43/0x240 [ 470.296304] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 470.301556] ? kmem_cache_alloc_trace+0x323/0x380 [ 470.306600] dh_compute_value+0x34e/0x5c0 [ 470.310768] ? dh_exit_tfm+0x20/0x20 [ 470.314494] ? __lockdep_init_map+0x100/0x5a0 [ 470.319277] ? __lockdep_init_map+0x100/0x5a0 [ 470.323788] __keyctl_dh_compute+0x953/0x13d0 [ 470.328858] ? dh_data_from_key+0x2a0/0x2a0 [ 470.333297] ? proc_fail_nth_write+0x95/0x1d0 [ 470.337942] ? __might_fault+0x11f/0x1d0 [ 470.342061] ? __might_fault+0xef/0x1d0 [ 470.346081] ? __might_fault+0x192/0x1d0 [ 470.350174] keyctl_dh_compute+0xbf/0x120 [ 470.354376] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 470.359423] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 470.364807] __se_sys_keyctl+0x10f/0x3f0 [ 470.369697] do_syscall_64+0xf9/0x620 [ 470.373535] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 470.378744] RIP: 0033:0x466459 [ 470.382231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 470.401319] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 20:04:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xffffff9e}, 0x0) 20:04:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 470.409052] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 470.416348] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 470.423893] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 470.431362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.438774] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:11 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000004", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:11 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xfffffff0}, 0x0) 20:04:11 executing program 1 (fault-call:3 fault-nth:19): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 470.759858] FAULT_INJECTION: forcing a failure. [ 470.759858] name failslab, interval 1, probability 0, space 0, times 0 [ 470.775565] nla_parse: 76 callbacks suppressed [ 470.775575] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 470.799103] CPU: 0 PID: 19122 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 470.807325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.818190] Call Trace: [ 470.820311] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 470.820831] dump_stack+0x1fc/0x2ef [ 470.833479] should_fail.cold+0xa/0xf [ 470.837733] ? setup_fault_attr+0x200/0x200 [ 470.842076] ? lock_acquire+0x170/0x3c0 [ 470.846092] __should_failslab+0x115/0x180 [ 470.850363] should_failslab+0x5/0x10 [ 470.854179] __kmalloc+0x2ab/0x3c0 [ 470.857729] ? mpi_alloc_limb_space+0x2f/0x50 [ 470.862250] mpi_alloc_limb_space+0x2f/0x50 [ 470.866937] mpi_powm+0x7e4/0x1a30 [ 470.870492] ? should_fail+0x142/0x7b0 [ 470.876305] ? fs_reclaim_release+0xd0/0x110 [ 470.881450] ? lock_acquire+0x170/0x3c0 [ 470.885462] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 470.890672] ? mpi_alloc+0x43/0x240 [ 470.894590] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 470.899819] ? kmem_cache_alloc_trace+0x323/0x380 [ 470.905306] dh_compute_value+0x34e/0x5c0 [ 470.909469] ? dh_exit_tfm+0x20/0x20 [ 470.913203] ? __lockdep_init_map+0x100/0x5a0 [ 470.918867] ? __lockdep_init_map+0x100/0x5a0 [ 470.923430] __keyctl_dh_compute+0x953/0x13d0 [ 470.928039] ? dh_data_from_key+0x2a0/0x2a0 [ 470.932374] ? proc_fail_nth_write+0x95/0x1d0 [ 470.937093] ? __might_fault+0x11f/0x1d0 [ 470.941170] ? __might_fault+0xef/0x1d0 [ 470.945592] ? __might_fault+0x192/0x1d0 [ 470.949829] keyctl_dh_compute+0xbf/0x120 [ 470.954941] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 470.959817] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 470.965264] __se_sys_keyctl+0x10f/0x3f0 [ 470.969776] do_syscall_64+0xf9/0x620 [ 470.973586] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 470.978867] RIP: 0033:0x466459 [ 470.982073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 471.001560] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 20:04:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:11 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000005", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 471.009491] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 471.016801] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 471.024622] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 471.032013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 471.039387] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:11 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:11 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x40030000000000}, 0x0) [ 471.105927] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 471.140744] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:04:11 executing program 1 (fault-call:3 fault-nth:20): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000006", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 471.219421] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 471.247861] FAULT_INJECTION: forcing a failure. [ 471.247861] name failslab, interval 1, probability 0, space 0, times 0 [ 471.290593] CPU: 0 PID: 19148 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 471.298856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.311417] Call Trace: [ 471.314378] dump_stack+0x1fc/0x2ef [ 471.318189] should_fail.cold+0xa/0xf [ 471.322110] ? setup_fault_attr+0x200/0x200 [ 471.326445] ? lock_acquire+0x170/0x3c0 [ 471.331398] __should_failslab+0x115/0x180 [ 471.336949] should_failslab+0x5/0x10 [ 471.341474] __kmalloc+0x2ab/0x3c0 [ 471.347107] ? mpi_resize+0x185/0x230 [ 471.352228] mpi_resize+0x185/0x230 [ 471.355893] mpi_powm+0x706/0x1a30 [ 471.359459] ? fs_reclaim_release+0xd0/0x110 [ 471.363909] ? lock_acquire+0x170/0x3c0 [ 471.367903] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 471.373112] ? mpi_alloc+0x43/0x240 [ 471.376751] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 471.381780] ? kmem_cache_alloc_trace+0x323/0x380 [ 471.386654] dh_compute_value+0x34e/0x5c0 [ 471.390818] ? dh_exit_tfm+0x20/0x20 [ 471.394571] ? __lockdep_init_map+0x100/0x5a0 [ 471.399090] ? __lockdep_init_map+0x100/0x5a0 [ 471.403631] __keyctl_dh_compute+0x953/0x13d0 [ 471.408166] ? dh_data_from_key+0x2a0/0x2a0 [ 471.412964] ? proc_fail_nth_write+0x95/0x1d0 [ 471.417494] ? __might_fault+0x11f/0x1d0 [ 471.421781] ? __might_fault+0xef/0x1d0 [ 471.426701] ? __might_fault+0x192/0x1d0 [ 471.428606] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 471.430782] keyctl_dh_compute+0xbf/0x120 [ 471.430799] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 471.430824] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 471.430842] __se_sys_keyctl+0x10f/0x3f0 [ 471.430860] do_syscall_64+0xf9/0x620 [ 471.430877] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.468033] RIP: 0033:0x466459 [ 471.471325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 471.492756] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 471.501197] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 471.508589] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 471.516414] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 471.525091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 471.532563] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:11 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xf0ffffffffffff}, 0x0) 20:04:12 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x100000000000000}, 0x0) [ 471.562883] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:04:12 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 471.611531] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:04:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\a', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 471.666946] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:04:12 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x200000000000000}, 0x0) 20:04:12 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\b', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:12 executing program 1 (fault-call:3 fault-nth:21): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 471.924467] FAULT_INJECTION: forcing a failure. [ 471.924467] name failslab, interval 1, probability 0, space 0, times 0 [ 471.952835] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 471.963492] CPU: 0 PID: 19189 Comm: syz-executor.1 Not tainted 4.19.183-syzkaller #0 [ 471.971392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.980749] Call Trace: [ 471.983356] dump_stack+0x1fc/0x2ef [ 471.987005] should_fail.cold+0xa/0xf [ 471.990846] ? setup_fault_attr+0x200/0x200 [ 471.995193] ? lock_acquire+0x170/0x3c0 [ 471.999283] __should_failslab+0x115/0x180 [ 472.003542] should_failslab+0x5/0x10 [ 472.007647] __kmalloc+0x2ab/0x3c0 [ 472.011206] ? mpi_alloc_limb_space+0x2f/0x50 [ 472.015812] mpi_alloc_limb_space+0x2f/0x50 [ 472.020415] mpi_powm+0xb56/0x1a30 [ 472.024331] ? fs_reclaim_release+0xd0/0x110 [ 472.028898] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 472.034198] ? mpi_alloc+0x43/0x240 [ 472.037839] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 472.043373] ? kmem_cache_alloc_trace+0x323/0x380 [ 472.048965] dh_compute_value+0x34e/0x5c0 [ 472.053234] ? dh_exit_tfm+0x20/0x20 [ 472.056989] ? __lockdep_init_map+0x100/0x5a0 [ 472.061594] ? __lockdep_init_map+0x100/0x5a0 [ 472.066229] __keyctl_dh_compute+0x953/0x13d0 [ 472.071190] ? dh_data_from_key+0x2a0/0x2a0 [ 472.075528] ? proc_fail_nth_write+0x95/0x1d0 [ 472.080237] ? __might_fault+0x11f/0x1d0 [ 472.084537] ? __might_fault+0xef/0x1d0 [ 472.090362] ? __might_fault+0x192/0x1d0 [ 472.094485] keyctl_dh_compute+0xbf/0x120 [ 472.098650] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 472.103442] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 472.109047] __se_sys_keyctl+0x10f/0x3f0 [ 472.113235] do_syscall_64+0xf9/0x620 [ 472.117168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.122572] RIP: 0033:0x466459 [ 472.125870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 472.145915] RSP: 002b:00007ff16bf5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 472.153811] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 472.162370] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 20:04:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x700000000000000}, 0x0) 20:04:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000f", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 472.169760] RBP: 00007ff16bf5a1d0 R08: 0000000020000000 R09: 0000000000000000 [ 472.177044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.184876] R13: 00007ffceeaa3b7f R14: 00007ff16bf5a300 R15: 0000000000022000 20:04:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000f0", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:12 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xf00000000000000}, 0x0) 20:04:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00H', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:13 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000002", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:13 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, 0x0) 20:04:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00L', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x9effffff00000000}, 0x0) 20:04:13 executing program 1 (fault-call:3 fault-nth:22): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:13 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, 0x0) 20:04:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xf0ffffff00000000}, 0x0) 20:04:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00`', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000003", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:13 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, 0x0) 20:04:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xf9a9478400000000}, 0x0) 20:04:13 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00h', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:13 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000004", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xffffff7f00000000}, 0x0) 20:04:13 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={0x0}) 20:04:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0xfffffffffffff000}, 0x0) 20:04:13 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={0x0}) 20:04:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00l', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000005", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x2}, 0x0) 20:04:14 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={0x0}) 20:04:14 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00t', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000006", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:14 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x2, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x7}, 0x0) 20:04:14 executing program 0 (fault-call:3 fault-nth:0): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\a', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:14 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x3, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 473.724016] FAULT_INJECTION: forcing a failure. [ 473.724016] name failslab, interval 1, probability 0, space 0, times 0 [ 473.795246] CPU: 0 PID: 19340 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 473.803709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.813334] Call Trace: [ 473.815958] dump_stack+0x1fc/0x2ef [ 473.819713] should_fail.cold+0xa/0xf [ 473.823620] ? setup_fault_attr+0x200/0x200 [ 473.828829] ? lock_acquire+0x170/0x3c0 [ 473.832831] __should_failslab+0x115/0x180 [ 473.837450] should_failslab+0x5/0x10 [ 473.841466] __kmalloc_track_caller+0x2a6/0x3c0 [ 473.846442] ? strndup_user+0x70/0x120 [ 473.851051] memdup_user+0x22/0xb0 [ 473.854696] strndup_user+0x70/0x120 [ 473.858422] __keyctl_dh_compute+0x1b0/0x13d0 [ 473.862926] ? check_preemption_disabled+0x41/0x280 [ 473.868045] ? dh_data_from_key+0x2a0/0x2a0 [ 473.872373] ? proc_fail_nth_write+0x95/0x1d0 [ 473.877334] ? __might_fault+0x11f/0x1d0 [ 473.881713] ? lock_downgrade+0x720/0x720 [ 473.885868] ? lock_acquire+0x170/0x3c0 [ 473.890028] ? __might_fault+0xef/0x1d0 [ 473.894026] ? __might_fault+0x192/0x1d0 [ 473.898115] keyctl_dh_compute+0xbf/0x120 [ 473.902273] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 473.907069] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 473.913426] __se_sys_keyctl+0x10f/0x3f0 [ 473.917506] do_syscall_64+0xf9/0x620 [ 473.921494] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.926722] RIP: 0033:0x466459 [ 473.930237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 473.950897] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 473.958716] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 473.966521] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 473.973836] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 473.981120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.988842] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00z', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000f0", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00,', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\b', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:14 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xf}, 0x0) 20:04:14 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x4, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000f", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:14 executing program 0 (fault-call:3 fault-nth:1): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 474.336335] FAULT_INJECTION: forcing a failure. [ 474.336335] name failslab, interval 1, probability 0, space 0, times 0 [ 474.393826] CPU: 1 PID: 19384 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 474.403425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.414966] Call Trace: [ 474.417577] dump_stack+0x1fc/0x2ef [ 474.421222] should_fail.cold+0xa/0xf [ 474.426683] ? setup_fault_attr+0x200/0x200 [ 474.432088] ? lock_acquire+0x170/0x3c0 [ 474.436521] __should_failslab+0x115/0x180 [ 474.441755] should_failslab+0x5/0x10 [ 474.445857] __kmalloc+0x2ab/0x3c0 [ 474.449414] ? crypto_create_tfm+0x79/0x2e0 [ 474.455702] ? up_read+0x17/0x110 [ 474.459269] crypto_create_tfm+0x79/0x2e0 [ 474.463469] crypto_alloc_tfm+0xff/0x230 [ 474.467555] __keyctl_dh_compute+0x1e0/0x13d0 [ 474.472069] ? check_preemption_disabled+0x41/0x280 [ 474.478255] ? dh_data_from_key+0x2a0/0x2a0 [ 474.482592] ? proc_fail_nth_write+0x95/0x1d0 [ 474.487378] ? __might_fault+0x11f/0x1d0 [ 474.491986] ? lock_downgrade+0x720/0x720 [ 474.497974] ? lock_acquire+0x170/0x3c0 [ 474.501965] ? __might_fault+0xef/0x1d0 [ 474.506009] ? __might_fault+0x192/0x1d0 [ 474.510097] keyctl_dh_compute+0xbf/0x120 [ 474.514266] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 474.519074] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 474.524462] __se_sys_keyctl+0x10f/0x3f0 [ 474.528544] do_syscall_64+0xf9/0x620 [ 474.532888] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 474.538374] RIP: 0033:0x466459 [ 474.541582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 474.560696] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 474.568616] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 474.576092] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 474.584089] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 20:04:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xf0}, 0x0) 20:04:15 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x5, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00H', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 474.591367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.599520] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x700}, 0x0) 20:04:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00L', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:15 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x6, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xf00}, 0x0) 20:04:15 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 474.876202] could not allocate digest TFM handle vmac64(aes) 20:04:15 executing program 0 (fault-call:3 fault-nth:2): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:15 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x7, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xf000}, 0x0) 20:04:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 475.018945] FAULT_INJECTION: forcing a failure. [ 475.018945] name failslab, interval 1, probability 0, space 0, times 0 20:04:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00`', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 475.092510] CPU: 0 PID: 19442 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 475.100789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.110935] Call Trace: [ 475.113563] dump_stack+0x1fc/0x2ef [ 475.117343] should_fail.cold+0xa/0xf [ 475.121257] ? setup_fault_attr+0x200/0x200 [ 475.125706] ? lock_acquire+0x170/0x3c0 [ 475.129823] __should_failslab+0x115/0x180 [ 475.134363] should_failslab+0x5/0x10 [ 475.138287] __kmalloc+0x2ab/0x3c0 [ 475.141924] ? __crypto_alloc_tfm+0xc1/0x4e0 [ 475.146533] __crypto_alloc_tfm+0xc1/0x4e0 [ 475.151146] crypto_spawn_tfm+0xe6/0x1d0 [ 475.155318] ? vmac_exit_tfm+0x40/0x40 [ 475.159230] vmac_init_tfm+0x42/0xc0 [ 475.163509] ? vmac_exit_tfm+0x40/0x40 [ 475.169464] crypto_create_tfm+0x163/0x2e0 [ 475.173808] crypto_alloc_tfm+0xff/0x230 [ 475.178072] __keyctl_dh_compute+0x1e0/0x13d0 [ 475.182597] ? check_preemption_disabled+0x41/0x280 [ 475.188522] ? dh_data_from_key+0x2a0/0x2a0 [ 475.192869] ? proc_fail_nth_write+0x95/0x1d0 [ 475.199654] ? __might_fault+0x11f/0x1d0 [ 475.203853] ? lock_downgrade+0x720/0x720 [ 475.210861] ? lock_acquire+0x170/0x3c0 [ 475.214957] ? __might_fault+0xef/0x1d0 [ 475.219060] ? __might_fault+0x192/0x1d0 [ 475.223146] keyctl_dh_compute+0xbf/0x120 [ 475.228830] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 475.233784] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 475.239266] __se_sys_keyctl+0x10f/0x3f0 [ 475.243403] do_syscall_64+0xf9/0x620 [ 475.247399] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 475.252596] RIP: 0033:0x466459 [ 475.255801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 475.274715] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 475.282446] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 20:04:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00h', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 475.289821] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 475.297107] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 475.304391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.311732] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00l', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x34000}, 0x0) 20:04:16 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x8, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 475.577985] could not allocate digest TFM handle vmac64(aes) 20:04:16 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:16 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x9, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00t', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x400300}, 0x0) 20:04:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000001", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:16 executing program 0 (fault-call:3 fault-nth:3): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 475.755211] FAULT_INJECTION: forcing a failure. [ 475.755211] name failslab, interval 1, probability 0, space 0, times 0 20:04:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xf0ffff}, 0x0) [ 475.813843] CPU: 1 PID: 19501 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 475.821985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.831350] Call Trace: [ 475.833957] dump_stack+0x1fc/0x2ef [ 475.838127] should_fail.cold+0xa/0xf [ 475.841948] ? setup_fault_attr+0x200/0x200 [ 475.846641] ? lock_acquire+0x170/0x3c0 [ 475.850819] __should_failslab+0x115/0x180 [ 475.855288] should_failslab+0x5/0x10 [ 475.859128] __kmalloc+0x2ab/0x3c0 [ 475.862681] ? __keyctl_dh_compute+0x29a/0x13d0 [ 475.867456] __keyctl_dh_compute+0x29a/0x13d0 [ 475.871999] ? check_preemption_disabled+0x41/0x280 [ 475.877683] ? dh_data_from_key+0x2a0/0x2a0 [ 475.882212] ? proc_fail_nth_write+0x95/0x1d0 [ 475.886826] ? __might_fault+0x11f/0x1d0 [ 475.890908] ? lock_downgrade+0x720/0x720 [ 475.895084] ? lock_acquire+0x170/0x3c0 [ 475.899112] ? __might_fault+0xef/0x1d0 [ 475.903102] ? __might_fault+0x192/0x1d0 [ 475.907262] keyctl_dh_compute+0xbf/0x120 20:04:16 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xa, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 475.911422] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 475.916204] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 475.921758] __se_sys_keyctl+0x10f/0x3f0 [ 475.928296] do_syscall_64+0xf9/0x620 [ 475.932211] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 475.937512] RIP: 0033:0x466459 [ 475.940714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:04:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00z', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 475.961847] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 475.970376] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 475.977698] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 475.985333] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 475.992616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.999908] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x1000000}, 0x0) 20:04:16 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xb, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 476.046284] nla_parse: 21 callbacks suppressed [ 476.046294] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 476.110156] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:04:16 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000f0", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:16 executing program 0 (fault-call:3 fault-nth:4): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x2000000}, 0x0) 20:04:16 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xc, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 476.400269] FAULT_INJECTION: forcing a failure. [ 476.400269] name failslab, interval 1, probability 0, space 0, times 0 [ 476.414564] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 476.431121] CPU: 0 PID: 19545 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 476.439721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.449833] Call Trace: [ 476.452437] dump_stack+0x1fc/0x2ef [ 476.456081] should_fail.cold+0xa/0xf [ 476.460070] ? setup_fault_attr+0x200/0x200 [ 476.464421] ? lock_acquire+0x170/0x3c0 [ 476.468417] __should_failslab+0x115/0x180 [ 476.472661] should_failslab+0x5/0x10 [ 476.476466] __kmalloc_track_caller+0x2a6/0x3c0 [ 476.481142] ? dh_data_from_key+0x17e/0x2a0 [ 476.485492] kmemdup+0x23/0x50 [ 476.488702] dh_data_from_key+0x17e/0x2a0 [ 476.492860] __keyctl_dh_compute+0x329/0x13d0 [ 476.497374] ? check_preemption_disabled+0x41/0x280 [ 476.502409] ? dh_data_from_key+0x2a0/0x2a0 [ 476.506739] ? proc_fail_nth_write+0x95/0x1d0 [ 476.511306] ? __might_fault+0x11f/0x1d0 [ 476.515401] ? lock_downgrade+0x720/0x720 [ 476.519553] ? lock_acquire+0x170/0x3c0 [ 476.523536] ? __might_fault+0xef/0x1d0 [ 476.527528] ? __might_fault+0x192/0x1d0 [ 476.531700] keyctl_dh_compute+0xbf/0x120 [ 476.535856] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 476.540643] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 476.546133] __se_sys_keyctl+0x10f/0x3f0 [ 476.550208] do_syscall_64+0xf9/0x620 [ 476.554017] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 476.559213] RIP: 0033:0x466459 [ 476.562412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 476.581322] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 476.589041] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 20:04:17 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xd, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 476.596315] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 476.603591] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 476.610884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.618418] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x7000000}, 0x0) [ 476.660677] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:04:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\"', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:17 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xe, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xf000000}, 0x0) 20:04:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:17 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 476.850487] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 476.889524] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 476.938217] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:04:17 executing program 0 (fault-call:3 fault-nth:5): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x8447a9f9}, 0x0) 20:04:17 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xf, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 477.006751] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:04:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 477.124134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 477.127921] FAULT_INJECTION: forcing a failure. [ 477.127921] name failslab, interval 1, probability 0, space 0, times 0 20:04:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x9effffff}, 0x0) 20:04:17 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x10, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 477.168919] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 477.216433] CPU: 0 PID: 19604 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 477.224362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.234051] Call Trace: [ 477.236654] dump_stack+0x1fc/0x2ef [ 477.240473] should_fail.cold+0xa/0xf [ 477.244284] ? setup_fault_attr+0x200/0x200 [ 477.248615] ? lock_acquire+0x170/0x3c0 [ 477.252605] __should_failslab+0x115/0x180 [ 477.256857] should_failslab+0x5/0x10 [ 477.260673] __kmalloc_track_caller+0x2a6/0x3c0 [ 477.265405] ? dh_data_from_key+0x17e/0x2a0 [ 477.269750] kmemdup+0x23/0x50 [ 477.272954] dh_data_from_key+0x17e/0x2a0 [ 477.277111] __keyctl_dh_compute+0x4a1/0x13d0 [ 477.281614] ? check_preemption_disabled+0x41/0x280 [ 477.286651] ? dh_data_from_key+0x2a0/0x2a0 [ 477.292461] ? proc_fail_nth_write+0x95/0x1d0 [ 477.296995] ? __might_fault+0x11f/0x1d0 [ 477.301067] ? lock_downgrade+0x720/0x720 [ 477.305282] ? lock_acquire+0x170/0x3c0 [ 477.309268] ? __might_fault+0xef/0x1d0 [ 477.313344] ? __might_fault+0x192/0x1d0 [ 477.317425] keyctl_dh_compute+0xbf/0x120 [ 477.321585] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 477.326357] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 477.331729] __se_sys_keyctl+0x10f/0x3f0 [ 477.335805] do_syscall_64+0xf9/0x620 [ 477.339626] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 477.344828] RIP: 0033:0x466459 [ 477.348082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:04:18 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xf0ffffff}, 0x0) 20:04:18 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x11, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 477.367199] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 477.374956] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 477.382699] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 477.390086] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 477.397373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.404845] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:18 executing program 0 (fault-call:3 fault-nth:6): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:18 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x12, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xf9a94784}, 0x0) 20:04:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 477.824415] FAULT_INJECTION: forcing a failure. [ 477.824415] name failslab, interval 1, probability 0, space 0, times 0 20:04:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 477.898753] CPU: 0 PID: 19654 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 477.906767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.916132] Call Trace: [ 477.918765] dump_stack+0x1fc/0x2ef [ 477.922430] should_fail.cold+0xa/0xf [ 477.926244] ? setup_fault_attr+0x200/0x200 [ 477.930578] ? lock_acquire+0x170/0x3c0 [ 477.934568] __should_failslab+0x115/0x180 [ 477.938814] should_failslab+0x5/0x10 [ 477.942622] __kmalloc_track_caller+0x2a6/0x3c0 [ 477.947319] ? dh_data_from_key+0x17e/0x2a0 [ 477.951676] kmemdup+0x23/0x50 [ 477.954908] dh_data_from_key+0x17e/0x2a0 [ 477.959071] __keyctl_dh_compute+0x4d3/0x13d0 [ 477.963600] ? check_preemption_disabled+0x41/0x280 [ 477.968640] ? dh_data_from_key+0x2a0/0x2a0 [ 477.972971] ? proc_fail_nth_write+0x95/0x1d0 [ 477.977689] ? __might_fault+0x11f/0x1d0 [ 477.981861] ? lock_downgrade+0x720/0x720 [ 477.986036] ? lock_acquire+0x170/0x3c0 [ 477.990390] ? __might_fault+0xef/0x1d0 [ 477.994378] ? __might_fault+0x192/0x1d0 [ 477.998453] keyctl_dh_compute+0xbf/0x120 [ 478.002618] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 478.007391] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 478.012763] __se_sys_keyctl+0x10f/0x3f0 [ 478.016831] do_syscall_64+0xf9/0x620 [ 478.020639] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 478.025857] RIP: 0033:0x466459 [ 478.029054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 478.047966] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 478.055777] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 478.063060] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 478.070339] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 478.077617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.084896] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:18 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, 0x0, 0x0, 0xd9f, 0x0) 20:04:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xfffff000}, 0x0) 20:04:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:18 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x13, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:18 executing program 0 (fault-call:3 fault-nth:7): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xffffff7f}, 0x0) 20:04:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000001", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:18 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x14, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 478.273905] FAULT_INJECTION: forcing a failure. [ 478.273905] name failslab, interval 1, probability 0, space 0, times 0 [ 478.345143] CPU: 1 PID: 19692 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 478.353240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.362605] Call Trace: [ 478.365210] dump_stack+0x1fc/0x2ef [ 478.369146] should_fail.cold+0xa/0xf [ 478.372968] ? setup_fault_attr+0x200/0x200 [ 478.377306] ? lock_acquire+0x170/0x3c0 [ 478.381320] __should_failslab+0x115/0x180 [ 478.385604] should_failslab+0x5/0x10 [ 478.390456] __kmalloc+0x2ab/0x3c0 [ 478.394016] ? __keyctl_dh_compute+0x512/0x13d0 [ 478.398735] __keyctl_dh_compute+0x512/0x13d0 [ 478.403546] ? dh_data_from_key+0x2a0/0x2a0 [ 478.407886] ? proc_fail_nth_write+0x95/0x1d0 [ 478.412412] ? __might_fault+0x11f/0x1d0 [ 478.416493] ? lock_downgrade+0x720/0x720 [ 478.420685] ? lock_acquire+0x170/0x3c0 [ 478.424666] ? __might_fault+0xef/0x1d0 [ 478.428670] ? __might_fault+0x192/0x1d0 [ 478.432754] keyctl_dh_compute+0xbf/0x120 [ 478.436916] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 478.441759] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 478.447257] __se_sys_keyctl+0x10f/0x3f0 [ 478.451337] do_syscall_64+0xf9/0x620 [ 478.455161] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 478.460358] RIP: 0033:0x466459 [ 478.463579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 478.482518] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 20:04:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xffffff9e}, 0x0) 20:04:19 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x15, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 478.490330] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 478.497603] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 478.504884] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 478.512161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.519446] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:19 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, 0x0, 0x0, 0xd9f, 0x0) 20:04:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xfffffff0}, 0x0) 20:04:19 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x16, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:19 executing program 0 (fault-call:3 fault-nth:8): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:19 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x18, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 478.911550] FAULT_INJECTION: forcing a failure. [ 478.911550] name failslab, interval 1, probability 0, space 0, times 0 20:04:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000ff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x40030000000000}, 0x0) [ 479.014810] CPU: 1 PID: 19740 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 479.022787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.032150] Call Trace: [ 479.034763] dump_stack+0x1fc/0x2ef [ 479.038418] should_fail.cold+0xa/0xf [ 479.042238] ? setup_fault_attr+0x200/0x200 [ 479.046589] ? lock_acquire+0x170/0x3c0 [ 479.050848] __should_failslab+0x115/0x180 [ 479.055110] should_failslab+0x5/0x10 [ 479.058923] __kmalloc+0x2ab/0x3c0 20:04:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 479.062479] ? crypto_create_tfm+0x79/0x2e0 [ 479.067081] ? up_read+0x17/0x110 [ 479.070564] crypto_create_tfm+0x79/0x2e0 [ 479.074723] crypto_alloc_tfm+0xff/0x230 [ 479.078826] __keyctl_dh_compute+0x55c/0x13d0 [ 479.083348] ? dh_data_from_key+0x2a0/0x2a0 [ 479.087683] ? proc_fail_nth_write+0x95/0x1d0 [ 479.092310] ? __might_fault+0x11f/0x1d0 [ 479.096763] ? lock_downgrade+0x720/0x720 [ 479.100953] ? lock_acquire+0x170/0x3c0 [ 479.104941] ? __might_fault+0xef/0x1d0 [ 479.112576] ? __might_fault+0x192/0x1d0 [ 479.116659] keyctl_dh_compute+0xbf/0x120 [ 479.122776] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 479.127993] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 479.133370] __se_sys_keyctl+0x10f/0x3f0 [ 479.138173] do_syscall_64+0xf9/0x620 [ 479.142107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 479.147623] RIP: 0033:0x466459 [ 479.150912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 479.169824] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 479.177545] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 479.184840] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 479.192136] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 479.199589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.206888] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:20 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, 0x0, 0x0, 0xd9f, 0x0) 20:04:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:20 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x1d, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 20:04:20 executing program 0 (fault-call:3 fault-nth:9): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 479.499045] FAULT_INJECTION: forcing a failure. [ 479.499045] name failslab, interval 1, probability 0, space 0, times 0 20:04:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:20 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xfa98487d, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 479.600644] CPU: 0 PID: 19789 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 479.608665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.618028] Call Trace: [ 479.620640] dump_stack+0x1fc/0x2ef [ 479.624280] should_fail.cold+0xa/0xf [ 479.628097] ? setup_fault_attr+0x200/0x200 [ 479.632433] ? lock_acquire+0x170/0x3c0 [ 479.636424] __should_failslab+0x115/0x180 [ 479.640679] should_failslab+0x5/0x10 [ 479.644500] kmem_cache_alloc_trace+0x284/0x380 [ 479.649213] ? crypto_dh_decode_key+0x36c/0x4a0 [ 479.655553] mpi_alloc+0x43/0x240 [ 479.659019] mpi_read_raw_data+0xd9/0x3f0 [ 479.663181] ? mpi_free+0x10/0x150 [ 479.666740] dh_set_secret+0xe8/0x2a0 [ 479.670557] ? dh_compute_value+0x5c0/0x5c0 [ 479.674901] ? crypto_alloc_tfm+0x123/0x230 [ 479.679238] __keyctl_dh_compute+0x5e3/0x13d0 [ 479.683755] ? dh_data_from_key+0x2a0/0x2a0 [ 479.688181] ? proc_fail_nth_write+0x95/0x1d0 [ 479.692728] ? __might_fault+0x11f/0x1d0 [ 479.696805] ? lock_downgrade+0x720/0x720 [ 479.700960] ? lock_acquire+0x170/0x3c0 [ 479.704942] ? __might_fault+0xef/0x1d0 [ 479.708936] ? __might_fault+0x192/0x1d0 [ 479.713020] keyctl_dh_compute+0xbf/0x120 [ 479.717178] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 479.721957] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 479.727333] __se_sys_keyctl+0x10f/0x3f0 [ 479.731411] do_syscall_64+0xf9/0x620 [ 479.735222] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 479.740416] RIP: 0033:0x466459 [ 479.743615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 479.762523] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 479.770243] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 479.777894] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 479.785177] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 479.792456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 20:04:20 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xb9b2b8fffa86fa40, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 479.799735] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:20 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) 20:04:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x200000000000000}, 0x0) 20:04:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:20 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xfffffffffa98487d, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:20 executing program 0 (fault-call:3 fault-nth:10): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 480.133684] FAULT_INJECTION: forcing a failure. [ 480.133684] name failslab, interval 1, probability 0, space 0, times 0 [ 480.193442] CPU: 0 PID: 19835 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 480.201372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.210913] Call Trace: [ 480.213534] dump_stack+0x1fc/0x2ef [ 480.217176] should_fail.cold+0xa/0xf [ 480.221017] ? setup_fault_attr+0x200/0x200 [ 480.225368] ? lock_acquire+0x170/0x3c0 [ 480.229491] __should_failslab+0x115/0x180 [ 480.233739] should_failslab+0x5/0x10 [ 480.237561] __kmalloc+0x2ab/0x3c0 [ 480.241112] ? mpi_alloc_limb_space+0x2f/0x50 [ 480.245631] mpi_alloc_limb_space+0x2f/0x50 [ 480.249965] mpi_alloc+0x1a3/0x240 [ 480.253527] mpi_read_raw_data+0xd9/0x3f0 [ 480.257691] ? mpi_free+0x10/0x150 [ 480.261251] dh_set_secret+0xe8/0x2a0 [ 480.265085] ? dh_compute_value+0x5c0/0x5c0 [ 480.269428] ? crypto_alloc_tfm+0x123/0x230 [ 480.273771] __keyctl_dh_compute+0x5e3/0x13d0 [ 480.278295] ? dh_data_from_key+0x2a0/0x2a0 [ 480.282638] ? proc_fail_nth_write+0x95/0x1d0 [ 480.287161] ? __might_fault+0x11f/0x1d0 [ 480.291258] ? lock_downgrade+0x720/0x720 [ 480.295422] ? lock_acquire+0x170/0x3c0 [ 480.299410] ? __might_fault+0xef/0x1d0 [ 480.303488] ? __might_fault+0x192/0x1d0 [ 480.307574] keyctl_dh_compute+0xbf/0x120 [ 480.312958] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 480.317764] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 480.323317] __se_sys_keyctl+0x10f/0x3f0 [ 480.327393] do_syscall_64+0xf9/0x620 [ 480.331222] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 480.336506] RIP: 0033:0x466459 20:04:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x700000000000000}, 0x0) 20:04:20 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xffffffffffffffff, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:20 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 480.339813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 480.358756] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 480.366501] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 480.373879] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 480.381509] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 20:04:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 480.388791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 480.396156] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xf00000000000000}, 0x0) 20:04:21 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) 20:04:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:21 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 20:04:21 executing program 0 (fault-call:3 fault-nth:11): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 480.827714] FAULT_INJECTION: forcing a failure. [ 480.827714] name failslab, interval 1, probability 0, space 0, times 0 [ 480.869715] CPU: 0 PID: 19888 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 480.877632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.886998] Call Trace: [ 480.889605] dump_stack+0x1fc/0x2ef [ 480.893243] should_fail.cold+0xa/0xf [ 480.897088] ? setup_fault_attr+0x200/0x200 [ 480.901425] ? lock_acquire+0x170/0x3c0 [ 480.905416] __should_failslab+0x115/0x180 [ 480.909687] should_failslab+0x5/0x10 [ 480.913593] kmem_cache_alloc_trace+0x284/0x380 [ 480.918279] mpi_alloc+0x43/0x240 [ 480.921748] mpi_read_raw_data+0xd9/0x3f0 [ 480.926503] dh_set_secret+0x146/0x2a0 [ 480.930419] ? dh_compute_value+0x5c0/0x5c0 [ 480.934760] ? crypto_alloc_tfm+0x123/0x230 [ 480.939096] __keyctl_dh_compute+0x5e3/0x13d0 [ 480.943731] ? dh_data_from_key+0x2a0/0x2a0 [ 480.948221] ? proc_fail_nth_write+0x95/0x1d0 [ 480.953457] ? __might_fault+0x11f/0x1d0 [ 480.957534] ? lock_downgrade+0x720/0x720 [ 480.961697] ? lock_acquire+0x170/0x3c0 [ 480.966026] ? __might_fault+0xef/0x1d0 [ 480.970020] ? __might_fault+0x192/0x1d0 [ 480.974100] keyctl_dh_compute+0xbf/0x120 [ 480.978293] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 480.983155] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 480.988545] __se_sys_keyctl+0x10f/0x3f0 [ 480.992615] do_syscall_64+0xf9/0x620 [ 480.996430] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 481.001763] RIP: 0033:0x466459 20:04:21 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 481.004963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 481.023964] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 481.031749] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 481.039305] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 481.046588] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 481.053865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 481.061140] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 20:04:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 481.089171] nla_parse: 50 callbacks suppressed [ 481.089181] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:04:21 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x5, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 481.173009] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 481.197959] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:04:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:21 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 481.255529] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:04:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xf9a9478400000000}, 0x0) 20:04:21 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 481.383035] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 481.411377] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:04:22 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 481.475149] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 481.528802] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 481.573286] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 481.604627] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:04:22 executing program 0 (fault-call:3 fault-nth:12): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 20:04:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:22 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) [ 481.763508] FAULT_INJECTION: forcing a failure. [ 481.763508] name failslab, interval 1, probability 0, space 0, times 0 [ 481.833928] CPU: 1 PID: 19956 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 481.841850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 481.851210] Call Trace: [ 481.853813] dump_stack+0x1fc/0x2ef [ 481.857455] should_fail.cold+0xa/0xf [ 481.861280] ? setup_fault_attr+0x200/0x200 [ 481.865616] ? lock_acquire+0x170/0x3c0 [ 481.869780] __should_failslab+0x115/0x180 [ 481.874029] should_failslab+0x5/0x10 [ 481.877848] __kmalloc+0x2ab/0x3c0 [ 481.881400] ? mpi_alloc_limb_space+0x2f/0x50 [ 481.886017] mpi_alloc_limb_space+0x2f/0x50 [ 481.890461] mpi_alloc+0x1a3/0x240 [ 481.894035] mpi_read_raw_data+0xd9/0x3f0 [ 481.898199] dh_set_secret+0x146/0x2a0 [ 481.902104] ? dh_compute_value+0x5c0/0x5c0 [ 481.906448] ? crypto_alloc_tfm+0x123/0x230 [ 481.910786] __keyctl_dh_compute+0x5e3/0x13d0 [ 481.915299] ? dh_data_from_key+0x2a0/0x2a0 [ 481.919662] ? proc_fail_nth_write+0x95/0x1d0 [ 481.924218] ? __might_fault+0x11f/0x1d0 [ 481.928294] ? lock_downgrade+0x720/0x720 [ 481.932451] ? lock_acquire+0x170/0x3c0 [ 481.936530] ? __might_fault+0xef/0x1d0 [ 481.940526] ? __might_fault+0x192/0x1d0 [ 481.944615] keyctl_dh_compute+0xbf/0x120 [ 481.948778] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 481.953560] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 481.958957] __se_sys_keyctl+0x10f/0x3f0 [ 481.963037] do_syscall_64+0xf9/0x620 [ 481.966892] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 481.972214] RIP: 0033:0x466459 [ 481.975417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 481.994767] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 482.003207] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 482.010484] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 482.017773] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 482.025777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 482.033077] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:22 executing program 0 (fault-call:3 fault-nth:13): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:22 executing program 5 (fault-call:3 fault-nth:0): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:22 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x9, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 482.288579] FAULT_INJECTION: forcing a failure. [ 482.288579] name failslab, interval 1, probability 0, space 0, times 0 [ 482.317850] FAULT_INJECTION: forcing a failure. [ 482.317850] name failslab, interval 1, probability 0, space 0, times 0 [ 482.322423] CPU: 1 PID: 19987 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 482.337371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.346836] Call Trace: [ 482.349464] dump_stack+0x1fc/0x2ef [ 482.353310] should_fail.cold+0xa/0xf [ 482.357588] ? setup_fault_attr+0x200/0x200 [ 482.362056] ? lock_acquire+0x170/0x3c0 [ 482.366079] __should_failslab+0x115/0x180 [ 482.370335] should_failslab+0x5/0x10 [ 482.374151] kmem_cache_alloc_trace+0x284/0x380 [ 482.378842] mpi_alloc+0x43/0x240 [ 482.382324] mpi_read_raw_data+0xd9/0x3f0 [ 482.386613] dh_set_secret+0x185/0x2a0 [ 482.390525] ? dh_compute_value+0x5c0/0x5c0 [ 482.394869] ? crypto_alloc_tfm+0x123/0x230 [ 482.399318] __keyctl_dh_compute+0x5e3/0x13d0 [ 482.403849] ? dh_data_from_key+0x2a0/0x2a0 [ 482.408235] ? proc_fail_nth_write+0x95/0x1d0 [ 482.412759] ? __might_fault+0x11f/0x1d0 [ 482.416845] ? lock_downgrade+0x720/0x720 [ 482.421096] ? lock_acquire+0x170/0x3c0 [ 482.425090] ? __might_fault+0xef/0x1d0 [ 482.429117] ? __might_fault+0x192/0x1d0 [ 482.433196] keyctl_dh_compute+0xbf/0x120 [ 482.437372] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 482.442164] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 482.447618] __se_sys_keyctl+0x10f/0x3f0 [ 482.451697] do_syscall_64+0xf9/0x620 [ 482.455548] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 482.460755] RIP: 0033:0x466459 [ 482.463968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 482.482886] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 482.490608] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 482.497883] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 482.505964] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 482.513264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 482.520537] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x0) 20:04:23 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xa, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 482.546959] CPU: 1 PID: 19995 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 482.554874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.564231] Call Trace: [ 482.566836] dump_stack+0x1fc/0x2ef [ 482.570479] should_fail.cold+0xa/0xf [ 482.574296] ? setup_fault_attr+0x200/0x200 [ 482.578736] ? lock_acquire+0x170/0x3c0 [ 482.582731] __should_failslab+0x115/0x180 [ 482.586982] should_failslab+0x5/0x10 [ 482.590791] __kmalloc_track_caller+0x2a6/0x3c0 20:04:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000ff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 482.595471] ? strndup_user+0x70/0x120 [ 482.599390] memdup_user+0x22/0xb0 [ 482.602940] strndup_user+0x70/0x120 [ 482.606783] __keyctl_dh_compute+0x1b0/0x13d0 [ 482.611292] ? check_preemption_disabled+0x41/0x280 [ 482.616330] ? dh_data_from_key+0x2a0/0x2a0 [ 482.620666] ? proc_fail_nth_write+0x95/0x1d0 [ 482.625192] ? __might_fault+0x11f/0x1d0 [ 482.629276] ? lock_downgrade+0x720/0x720 [ 482.633433] ? lock_acquire+0x170/0x3c0 [ 482.637419] ? __might_fault+0xef/0x1d0 [ 482.641422] ? __might_fault+0x192/0x1d0 [ 482.645510] keyctl_dh_compute+0xbf/0x120 [ 482.649681] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 482.654486] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 482.660218] __se_sys_keyctl+0x10f/0x3f0 [ 482.665253] do_syscall_64+0xf9/0x620 [ 482.669079] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 482.674313] RIP: 0033:0x466459 [ 482.677517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 482.696472] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 482.704282] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 482.711566] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 482.718892] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 482.726169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.733460] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:23 executing program 0 (fault-call:3 fault-nth:14): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:23 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xb, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 482.848072] FAULT_INJECTION: forcing a failure. [ 482.848072] name failslab, interval 1, probability 0, space 0, times 0 [ 482.869924] CPU: 1 PID: 20024 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 482.877931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.887384] Call Trace: [ 482.889992] dump_stack+0x1fc/0x2ef [ 482.893654] should_fail.cold+0xa/0xf [ 482.897472] ? setup_fault_attr+0x200/0x200 [ 482.902507] ? lock_acquire+0x170/0x3c0 [ 482.906620] __should_failslab+0x115/0x180 [ 482.911079] should_failslab+0x5/0x10 [ 482.914920] __kmalloc+0x2ab/0x3c0 [ 482.918472] ? mpi_alloc_limb_space+0x2f/0x50 [ 482.922988] mpi_alloc_limb_space+0x2f/0x50 [ 482.927604] mpi_alloc+0x1a3/0x240 [ 482.931243] mpi_read_raw_data+0xd9/0x3f0 [ 482.935588] dh_set_secret+0x185/0x2a0 [ 482.939496] ? dh_compute_value+0x5c0/0x5c0 [ 482.943841] ? crypto_alloc_tfm+0x123/0x230 [ 482.951508] __keyctl_dh_compute+0x5e3/0x13d0 [ 482.956031] ? dh_data_from_key+0x2a0/0x2a0 [ 482.961946] ? proc_fail_nth_write+0x95/0x1d0 [ 482.966467] ? __might_fault+0x11f/0x1d0 [ 482.970808] ? lock_downgrade+0x720/0x720 [ 482.974966] ? lock_acquire+0x170/0x3c0 [ 482.978951] ? __might_fault+0xef/0x1d0 [ 482.982943] ? __might_fault+0x192/0x1d0 [ 482.987062] keyctl_dh_compute+0xbf/0x120 [ 482.991237] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 482.996016] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 483.002122] __se_sys_keyctl+0x10f/0x3f0 [ 483.006217] do_syscall_64+0xf9/0x620 [ 483.010035] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 483.015326] RIP: 0033:0x466459 [ 483.018525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 483.041168] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 483.049406] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 483.056690] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 483.063972] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 483.071287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.078570] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:23 executing program 5 (fault-call:3 fault-nth:1): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0x7}, 0x0) 20:04:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:23 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:23 executing program 0 (fault-call:3 fault-nth:15): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 483.201156] FAULT_INJECTION: forcing a failure. [ 483.201156] name failslab, interval 1, probability 0, space 0, times 0 [ 483.225120] FAULT_INJECTION: forcing a failure. [ 483.225120] name failslab, interval 1, probability 0, space 0, times 0 [ 483.283152] CPU: 1 PID: 20045 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 483.291087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.300449] Call Trace: [ 483.303062] dump_stack+0x1fc/0x2ef [ 483.306706] should_fail.cold+0xa/0xf [ 483.310528] ? setup_fault_attr+0x200/0x200 [ 483.314868] ? lock_acquire+0x170/0x3c0 [ 483.318866] __should_failslab+0x115/0x180 [ 483.323125] should_failslab+0x5/0x10 [ 483.326937] __kmalloc+0x2ab/0x3c0 20:04:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0xf0}, 0x0) [ 483.330491] ? crypto_create_tfm+0x79/0x2e0 [ 483.334827] ? up_read+0x17/0x110 [ 483.338303] crypto_create_tfm+0x79/0x2e0 [ 483.344408] crypto_alloc_tfm+0xff/0x230 [ 483.348489] __keyctl_dh_compute+0x1e0/0x13d0 [ 483.353178] ? check_preemption_disabled+0x41/0x280 [ 483.358307] ? dh_data_from_key+0x2a0/0x2a0 [ 483.362657] ? proc_fail_nth_write+0x95/0x1d0 [ 483.367207] ? __might_fault+0x11f/0x1d0 [ 483.371350] ? lock_downgrade+0x720/0x720 [ 483.375505] ? lock_acquire+0x170/0x3c0 [ 483.379592] ? __might_fault+0xef/0x1d0 [ 483.383613] ? __might_fault+0x192/0x1d0 [ 483.387693] keyctl_dh_compute+0xbf/0x120 [ 483.391974] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 483.396838] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 483.402579] __se_sys_keyctl+0x10f/0x3f0 [ 483.406661] do_syscall_64+0xf9/0x620 [ 483.410573] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 483.415858] RIP: 0033:0x466459 20:04:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 483.419082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 483.438088] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 483.445817] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 483.453094] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 483.460375] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 483.467649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.474922] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 [ 483.483086] CPU: 0 PID: 20049 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 483.493853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.503263] Call Trace: [ 483.505868] dump_stack+0x1fc/0x2ef [ 483.509619] should_fail.cold+0xa/0xf [ 483.513434] ? setup_fault_attr+0x200/0x200 [ 483.517780] ? lock_acquire+0x170/0x3c0 [ 483.521774] __should_failslab+0x115/0x180 [ 483.526020] should_failslab+0x5/0x10 [ 483.529293] could not allocate digest TFM handle vmac64(aes) [ 483.530095] __kmalloc+0x2ab/0x3c0 [ 483.530111] ? __keyctl_dh_compute+0x69e/0x13d0 [ 483.530129] __keyctl_dh_compute+0x69e/0x13d0 [ 483.548996] ? dh_data_from_key+0x2a0/0x2a0 [ 483.553331] ? proc_fail_nth_write+0x95/0x1d0 [ 483.557873] ? __might_fault+0x11f/0x1d0 [ 483.561958] ? lock_downgrade+0x720/0x720 [ 483.566297] ? lock_acquire+0x170/0x3c0 [ 483.570370] ? __might_fault+0xef/0x1d0 [ 483.574367] ? __might_fault+0x192/0x1d0 [ 483.578456] keyctl_dh_compute+0xbf/0x120 [ 483.582614] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 483.587396] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 483.593012] __se_sys_keyctl+0x10f/0x3f0 [ 483.597189] do_syscall_64+0xf9/0x620 [ 483.601002] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 483.606216] RIP: 0033:0x466459 [ 483.609408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:04:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0x700}, 0x0) 20:04:24 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 483.628316] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 483.636031] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 483.643390] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 483.650649] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 483.657931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.665449] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:24 executing program 5 (fault-call:3 fault-nth:2): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:24 executing program 0 (fault-call:3 fault-nth:16): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 483.801653] FAULT_INJECTION: forcing a failure. [ 483.801653] name failslab, interval 1, probability 0, space 0, times 0 20:04:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 483.860532] CPU: 1 PID: 20085 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 483.868457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.878018] Call Trace: [ 483.880640] dump_stack+0x1fc/0x2ef [ 483.884285] should_fail.cold+0xa/0xf [ 483.888234] ? setup_fault_attr+0x200/0x200 [ 483.892595] ? lock_acquire+0x170/0x3c0 [ 483.896686] __should_failslab+0x115/0x180 [ 483.900961] should_failslab+0x5/0x10 [ 483.904860] __kmalloc+0x2ab/0x3c0 [ 483.908421] ? __crypto_alloc_tfm+0xc1/0x4e0 [ 483.912847] __crypto_alloc_tfm+0xc1/0x4e0 [ 483.917109] crypto_spawn_tfm+0xe6/0x1d0 [ 483.921206] ? vmac_exit_tfm+0x40/0x40 [ 483.925116] vmac_init_tfm+0x42/0xc0 [ 483.928840] ? vmac_exit_tfm+0x40/0x40 [ 483.932741] crypto_create_tfm+0x163/0x2e0 [ 483.936994] crypto_alloc_tfm+0xff/0x230 [ 483.941087] __keyctl_dh_compute+0x1e0/0x13d0 [ 483.945862] ? check_preemption_disabled+0x41/0x280 [ 483.951233] ? dh_data_from_key+0x2a0/0x2a0 [ 483.955570] ? proc_fail_nth_write+0x95/0x1d0 20:04:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 483.960097] ? __might_fault+0x11f/0x1d0 [ 483.964175] ? lock_downgrade+0x720/0x720 [ 483.968330] ? lock_acquire+0x170/0x3c0 [ 483.972333] ? __might_fault+0xef/0x1d0 [ 483.976436] ? __might_fault+0x192/0x1d0 [ 483.980526] keyctl_dh_compute+0xbf/0x120 [ 483.984711] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 483.989608] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 483.994991] __se_sys_keyctl+0x10f/0x3f0 [ 483.999072] do_syscall_64+0xf9/0x620 [ 484.003141] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 484.008357] RIP: 0033:0x466459 [ 484.011567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 484.030483] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 484.038198] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 484.045487] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 484.052777] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 20:04:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:24 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xe, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 484.060064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.067359] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 [ 484.086058] FAULT_INJECTION: forcing a failure. [ 484.086058] name failslab, interval 1, probability 0, space 0, times 0 [ 484.119600] CPU: 1 PID: 20091 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 484.127520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.136891] Call Trace: [ 484.139502] dump_stack+0x1fc/0x2ef [ 484.143164] should_fail.cold+0xa/0xf [ 484.146976] ? setup_fault_attr+0x200/0x200 [ 484.151310] ? lock_acquire+0x170/0x3c0 [ 484.155327] __should_failslab+0x115/0x180 [ 484.159584] should_failslab+0x5/0x10 [ 484.163409] __kmalloc+0x2ab/0x3c0 [ 484.167023] ? __keyctl_dh_compute+0x725/0x13d0 [ 484.171713] ? sg_init_one+0xd9/0x180 [ 484.175534] __keyctl_dh_compute+0x725/0x13d0 [ 484.180053] ? dh_data_from_key+0x2a0/0x2a0 [ 484.184382] ? proc_fail_nth_write+0x95/0x1d0 [ 484.188903] ? __might_fault+0x11f/0x1d0 [ 484.192986] ? lock_downgrade+0x720/0x720 [ 484.197669] ? lock_acquire+0x170/0x3c0 [ 484.201662] ? __might_fault+0xef/0x1d0 [ 484.205656] ? __might_fault+0x192/0x1d0 [ 484.209737] keyctl_dh_compute+0xbf/0x120 [ 484.213900] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 484.218679] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 484.224080] __se_sys_keyctl+0x10f/0x3f0 [ 484.228313] do_syscall_64+0xf9/0x620 [ 484.232206] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 484.237412] RIP: 0033:0x466459 [ 484.240614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 484.259526] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 20:04:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 484.263019] could not allocate digest TFM handle vmac64(aes) [ 484.267337] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 484.267345] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 484.267353] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 484.267360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 484.267369] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:24 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 20:04:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:25 executing program 5 (fault-call:3 fault-nth:3): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 20:04:25 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x15, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:25 executing program 0 (fault-call:3 fault-nth:17): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:25 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x17, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 484.651207] FAULT_INJECTION: forcing a failure. [ 484.651207] name failslab, interval 1, probability 0, space 0, times 0 [ 484.665349] FAULT_INJECTION: forcing a failure. [ 484.665349] name failslab, interval 1, probability 0, space 0, times 0 [ 484.713387] CPU: 0 PID: 20154 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 484.721572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.730934] Call Trace: [ 484.733639] dump_stack+0x1fc/0x2ef [ 484.737288] should_fail.cold+0xa/0xf [ 484.741108] ? setup_fault_attr+0x200/0x200 [ 484.745470] ? lock_acquire+0x170/0x3c0 [ 484.749940] __should_failslab+0x115/0x180 [ 484.754210] should_failslab+0x5/0x10 [ 484.758040] __kmalloc+0x2ab/0x3c0 [ 484.761597] ? __keyctl_dh_compute+0x29a/0x13d0 [ 484.766302] __keyctl_dh_compute+0x29a/0x13d0 [ 484.770814] ? check_preemption_disabled+0x41/0x280 [ 484.775851] ? dh_data_from_key+0x2a0/0x2a0 [ 484.780276] ? proc_fail_nth_write+0x95/0x1d0 [ 484.784798] ? __might_fault+0x11f/0x1d0 [ 484.788884] ? lock_downgrade+0x720/0x720 [ 484.793156] ? lock_acquire+0x170/0x3c0 [ 484.797150] ? __might_fault+0xef/0x1d0 [ 484.801236] ? __might_fault+0x192/0x1d0 [ 484.805344] keyctl_dh_compute+0xbf/0x120 [ 484.809507] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 484.814294] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 484.819674] __se_sys_keyctl+0x10f/0x3f0 [ 484.823750] do_syscall_64+0xf9/0x620 [ 484.827564] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 484.833111] RIP: 0033:0x466459 [ 484.836314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 484.855328] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 20:04:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:25 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) [ 484.863049] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 484.870941] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 484.878271] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 484.885545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.892823] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 [ 484.911936] CPU: 1 PID: 20155 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 484.919860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.929269] Call Trace: [ 484.931874] dump_stack+0x1fc/0x2ef [ 484.935512] should_fail.cold+0xa/0xf [ 484.939327] ? setup_fault_attr+0x200/0x200 [ 484.943666] ? lock_acquire+0x170/0x3c0 [ 484.947659] __should_failslab+0x115/0x180 [ 484.951907] should_failslab+0x5/0x10 [ 484.955734] kmem_cache_alloc_trace+0x284/0x380 [ 484.960413] ? should_fail+0x142/0x7b0 [ 484.964325] mpi_alloc+0x43/0x240 [ 484.967787] dh_compute_value+0x8b/0x5c0 [ 484.971858] ? dh_exit_tfm+0x20/0x20 [ 484.975593] ? __lockdep_init_map+0x100/0x5a0 [ 484.980120] ? __lockdep_init_map+0x100/0x5a0 [ 484.984723] __keyctl_dh_compute+0x953/0x13d0 [ 484.989232] ? dh_data_from_key+0x2a0/0x2a0 [ 484.993558] ? proc_fail_nth_write+0x95/0x1d0 [ 484.998094] ? __might_fault+0x11f/0x1d0 [ 485.002176] ? __might_fault+0xef/0x1d0 [ 485.006178] ? __might_fault+0x192/0x1d0 [ 485.010257] keyctl_dh_compute+0xbf/0x120 [ 485.014411] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 485.019196] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 485.024571] __se_sys_keyctl+0x10f/0x3f0 [ 485.028663] do_syscall_64+0xf9/0x620 [ 485.032482] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 485.037701] RIP: 0033:0x466459 [ 485.040936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:04:25 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x1d, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 485.060321] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 485.068255] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 485.075727] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 485.083184] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 485.090592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.097885] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:25 executing program 5 (fault-call:3 fault-nth:4): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 20:04:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000b5", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 485.215922] FAULT_INJECTION: forcing a failure. [ 485.215922] name failslab, interval 1, probability 0, space 0, times 0 [ 485.255915] CPU: 1 PID: 20192 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 485.263842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.274058] Call Trace: [ 485.278075] dump_stack+0x1fc/0x2ef [ 485.282191] should_fail.cold+0xa/0xf [ 485.288501] ? setup_fault_attr+0x200/0x200 [ 485.293051] ? lock_acquire+0x170/0x3c0 [ 485.298104] __should_failslab+0x115/0x180 [ 485.302536] should_failslab+0x5/0x10 [ 485.306960] __kmalloc_track_caller+0x2a6/0x3c0 [ 485.311644] ? dh_data_from_key+0x17e/0x2a0 [ 485.317474] kmemdup+0x23/0x50 [ 485.320684] dh_data_from_key+0x17e/0x2a0 [ 485.324849] __keyctl_dh_compute+0x329/0x13d0 [ 485.329387] ? check_preemption_disabled+0x41/0x280 [ 485.334426] ? dh_data_from_key+0x2a0/0x2a0 [ 485.338888] ? proc_fail_nth_write+0x95/0x1d0 [ 485.343532] ? __might_fault+0x11f/0x1d0 [ 485.347704] ? lock_downgrade+0x720/0x720 [ 485.351875] ? lock_acquire+0x170/0x3c0 [ 485.355865] ? __might_fault+0xef/0x1d0 [ 485.360385] ? __might_fault+0x192/0x1d0 [ 485.364665] keyctl_dh_compute+0xbf/0x120 [ 485.369299] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 485.374173] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 485.379763] __se_sys_keyctl+0x10f/0x3f0 [ 485.383860] do_syscall_64+0xf9/0x620 [ 485.387765] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 485.392976] RIP: 0033:0x466459 [ 485.396195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 485.415290] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 485.424012] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 485.431370] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 485.438645] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 485.446110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.453829] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:26 executing program 0 (fault-call:3 fault-nth:18): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 20:04:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000ff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000085", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:26 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x1e, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:26 executing program 5 (fault-call:3 fault-nth:5): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:26 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x2a, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) [ 485.618510] FAULT_INJECTION: forcing a failure. [ 485.618510] name failslab, interval 1, probability 0, space 0, times 0 [ 485.653445] FAULT_INJECTION: forcing a failure. [ 485.653445] name failslab, interval 1, probability 0, space 0, times 0 [ 485.680940] CPU: 1 PID: 20222 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 485.689680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.699683] Call Trace: [ 485.702380] dump_stack+0x1fc/0x2ef [ 485.706032] should_fail.cold+0xa/0xf [ 485.709857] ? setup_fault_attr+0x200/0x200 [ 485.714191] ? lock_acquire+0x170/0x3c0 [ 485.718474] __should_failslab+0x115/0x180 [ 485.722842] should_failslab+0x5/0x10 [ 485.726656] __kmalloc+0x2ab/0x3c0 [ 485.730218] ? mpi_alloc_limb_space+0x2f/0x50 [ 485.734999] mpi_alloc_limb_space+0x2f/0x50 [ 485.739356] mpi_powm+0x43d/0x1a30 [ 485.742912] ? should_fail+0x142/0x7b0 [ 485.746813] ? fs_reclaim_release+0xd0/0x110 [ 485.751233] ? setup_fault_attr+0x200/0x200 [ 485.760434] ? lock_acquire+0x170/0x3c0 [ 485.764432] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 485.769652] ? mpi_alloc+0x43/0x240 [ 485.773292] ? rcu_read_lock_sched_held+0x16c/0x1d0 20:04:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 485.778510] ? kmem_cache_alloc_trace+0x323/0x380 [ 485.783930] dh_compute_value+0x34e/0x5c0 [ 485.788091] ? dh_exit_tfm+0x20/0x20 [ 485.791849] ? __lockdep_init_map+0x100/0x5a0 [ 485.796374] ? __lockdep_init_map+0x100/0x5a0 [ 485.800890] __keyctl_dh_compute+0x953/0x13d0 [ 485.805410] ? dh_data_from_key+0x2a0/0x2a0 [ 485.809785] ? proc_fail_nth_write+0x95/0x1d0 [ 485.814300] ? __might_fault+0x11f/0x1d0 [ 485.818445] ? __might_fault+0xef/0x1d0 [ 485.822432] ? __might_fault+0x192/0x1d0 [ 485.826608] keyctl_dh_compute+0xbf/0x120 [ 485.830765] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 485.835972] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 485.841464] __se_sys_keyctl+0x10f/0x3f0 [ 485.845636] do_syscall_64+0xf9/0x620 [ 485.849450] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 485.854996] RIP: 0033:0x466459 [ 485.858193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 485.877194] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 485.884909] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 485.892184] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 485.899464] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 485.906746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.914027] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 [ 485.921324] CPU: 0 PID: 20227 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 485.929855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.939301] Call Trace: [ 485.941918] dump_stack+0x1fc/0x2ef [ 485.945564] should_fail.cold+0xa/0xf [ 485.949411] ? setup_fault_attr+0x200/0x200 [ 485.953832] ? lock_acquire+0x170/0x3c0 [ 485.957827] __should_failslab+0x115/0x180 [ 485.962072] should_failslab+0x5/0x10 [ 485.965890] __kmalloc_track_caller+0x2a6/0x3c0 [ 485.970572] ? dh_data_from_key+0x17e/0x2a0 [ 485.974911] kmemdup+0x23/0x50 [ 485.978118] dh_data_from_key+0x17e/0x2a0 [ 485.982280] __keyctl_dh_compute+0x4a1/0x13d0 [ 485.986798] ? check_preemption_disabled+0x41/0x280 [ 485.991830] ? dh_data_from_key+0x2a0/0x2a0 [ 485.996256] ? proc_fail_nth_write+0x95/0x1d0 [ 486.000810] ? __might_fault+0x11f/0x1d0 [ 486.004890] ? lock_downgrade+0x720/0x720 [ 486.009075] ? lock_acquire+0x170/0x3c0 [ 486.013089] ? __might_fault+0xef/0x1d0 [ 486.017088] ? __might_fault+0x192/0x1d0 [ 486.021164] keyctl_dh_compute+0xbf/0x120 [ 486.025318] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 486.030088] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 486.035460] __se_sys_keyctl+0x10f/0x3f0 [ 486.039546] do_syscall_64+0xf9/0x620 [ 486.043358] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 486.048567] RIP: 0033:0x466459 [ 486.051771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 486.071256] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 20:04:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000083", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000ff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 486.079108] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 486.086396] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 486.093673] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 486.100959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.108271] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:26 executing program 0 (fault-call:3 fault-nth:19): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000ff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0x8447a9f9}, 0x0) 20:04:26 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:26 executing program 5 (fault-call:3 fault-nth:6): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 486.253143] nla_parse: 56 callbacks suppressed [ 486.253153] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 486.293096] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:04:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 486.293366] FAULT_INJECTION: forcing a failure. [ 486.293366] name failslab, interval 1, probability 0, space 0, times 0 [ 486.326096] FAULT_INJECTION: forcing a failure. [ 486.326096] name failslab, interval 1, probability 0, space 0, times 0 20:04:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 486.350116] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 486.362067] CPU: 0 PID: 20270 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 486.370072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.379523] Call Trace: [ 486.382148] dump_stack+0x1fc/0x2ef [ 486.385789] should_fail.cold+0xa/0xf [ 486.389616] ? setup_fault_attr+0x200/0x200 [ 486.394078] ? lock_acquire+0x170/0x3c0 [ 486.398069] __should_failslab+0x115/0x180 [ 486.402346] should_failslab+0x5/0x10 [ 486.406292] __kmalloc+0x2ab/0x3c0 [ 486.410024] ? mpi_resize+0x185/0x230 [ 486.413938] mpi_resize+0x185/0x230 [ 486.417587] mpi_powm+0x706/0x1a30 [ 486.421412] ? fs_reclaim_release+0xd0/0x110 [ 486.426744] ? lock_acquire+0x170/0x3c0 [ 486.435534] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 486.441555] ? mpi_alloc+0x43/0x240 [ 486.445297] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 486.450675] ? kmem_cache_alloc_trace+0x323/0x380 [ 486.458152] dh_compute_value+0x34e/0x5c0 [ 486.462414] ? dh_exit_tfm+0x20/0x20 [ 486.466448] ? __lockdep_init_map+0x100/0x5a0 [ 486.471217] ? __lockdep_init_map+0x100/0x5a0 [ 486.476256] __keyctl_dh_compute+0x953/0x13d0 [ 486.480777] ? dh_data_from_key+0x2a0/0x2a0 [ 486.485145] ? proc_fail_nth_write+0x95/0x1d0 [ 486.489755] ? __might_fault+0x11f/0x1d0 [ 486.493831] ? __might_fault+0xef/0x1d0 [ 486.497822] ? __might_fault+0x192/0x1d0 [ 486.501921] keyctl_dh_compute+0xbf/0x120 [ 486.506093] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 486.510869] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 486.516248] __se_sys_keyctl+0x10f/0x3f0 [ 486.520348] do_syscall_64+0xf9/0x620 [ 486.524169] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 486.529374] RIP: 0033:0x466459 [ 486.532580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 486.551491] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 486.559207] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 486.566621] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 486.573899] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 486.581176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 486.588471] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 [ 486.614443] CPU: 1 PID: 20272 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 486.622355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.631719] Call Trace: [ 486.634326] dump_stack+0x1fc/0x2ef [ 486.637970] should_fail.cold+0xa/0xf [ 486.641829] ? setup_fault_attr+0x200/0x200 [ 486.646162] ? lock_acquire+0x170/0x3c0 [ 486.648001] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 486.650266] __should_failslab+0x115/0x180 [ 486.650285] should_failslab+0x5/0x10 [ 486.650299] __kmalloc_track_caller+0x2a6/0x3c0 [ 486.650313] ? dh_data_from_key+0x17e/0x2a0 [ 486.650331] kmemdup+0x23/0x50 [ 486.650349] dh_data_from_key+0x17e/0x2a0 [ 486.683771] __keyctl_dh_compute+0x4d3/0x13d0 [ 486.688290] ? check_preemption_disabled+0x41/0x280 [ 486.693336] ? dh_data_from_key+0x2a0/0x2a0 [ 486.697792] ? proc_fail_nth_write+0x95/0x1d0 [ 486.702287] ? __might_fault+0x11f/0x1d0 [ 486.706413] ? lock_downgrade+0x720/0x720 [ 486.710567] ? lock_acquire+0x170/0x3c0 [ 486.714540] ? __might_fault+0xef/0x1d0 [ 486.718536] ? __might_fault+0x192/0x1d0 [ 486.722778] keyctl_dh_compute+0xbf/0x120 [ 486.726917] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 486.731683] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 486.737049] __se_sys_keyctl+0x10f/0x3f0 [ 486.741126] do_syscall_64+0xf9/0x620 [ 486.745471] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 486.750735] RIP: 0033:0x466459 [ 486.753936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 486.772843] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 486.780646] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 486.787910] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 486.795180] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 486.802433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 20:04:27 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x3a, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 20:04:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 486.810917] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 [ 486.847254] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:04:27 executing program 0 (fault-call:3 fault-nth:20): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400007f", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 486.946544] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 486.966497] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:04:27 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xba, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 486.992646] FAULT_INJECTION: forcing a failure. [ 486.992646] name failslab, interval 1, probability 0, space 0, times 0 [ 487.018629] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 487.023296] CPU: 1 PID: 20307 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 487.035439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.044808] Call Trace: [ 487.047418] dump_stack+0x1fc/0x2ef [ 487.051083] should_fail.cold+0xa/0xf [ 487.054902] ? setup_fault_attr+0x200/0x200 [ 487.059264] ? lock_acquire+0x170/0x3c0 [ 487.063261] __should_failslab+0x115/0x180 [ 487.067534] should_failslab+0x5/0x10 [ 487.071348] __kmalloc+0x2ab/0x3c0 [ 487.074910] ? mpi_alloc_limb_space+0x2f/0x50 [ 487.079625] mpi_alloc_limb_space+0x2f/0x50 [ 487.083967] mpi_powm+0xb56/0x1a30 [ 487.087534] ? fs_reclaim_release+0xd0/0x110 [ 487.092104] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 487.097310] ? mpi_alloc+0x43/0x240 [ 487.100972] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 487.106125] ? kmem_cache_alloc_trace+0x323/0x380 [ 487.110995] dh_compute_value+0x34e/0x5c0 [ 487.115171] ? dh_exit_tfm+0x20/0x20 [ 487.118913] ? __lockdep_init_map+0x100/0x5a0 [ 487.123432] ? __lockdep_init_map+0x100/0x5a0 [ 487.127950] __keyctl_dh_compute+0x953/0x13d0 [ 487.132499] ? dh_data_from_key+0x2a0/0x2a0 [ 487.136888] ? proc_fail_nth_write+0x95/0x1d0 [ 487.141416] ? __might_fault+0x11f/0x1d0 [ 487.145496] ? __might_fault+0xef/0x1d0 [ 487.149496] ? __might_fault+0x192/0x1d0 [ 487.153579] keyctl_dh_compute+0xbf/0x120 [ 487.158000] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 487.162866] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 487.168254] __se_sys_keyctl+0x10f/0x3f0 [ 487.172354] do_syscall_64+0xf9/0x620 [ 487.176174] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 487.181566] RIP: 0033:0x466459 20:04:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:27 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x14b, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 487.184951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 487.203859] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 487.211575] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 487.218849] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 487.226213] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 487.233503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.240798] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:27 executing program 5 (fault-call:3 fault-nth:7): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0xf9a94784}, 0x0) 20:04:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400009e", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 487.316858] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 487.333294] FAULT_INJECTION: forcing a failure. [ 487.333294] name failslab, interval 1, probability 0, space 0, times 0 [ 487.345543] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:04:28 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x239, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 487.412364] CPU: 0 PID: 20329 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 487.420301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.429680] Call Trace: [ 487.432648] dump_stack+0x1fc/0x2ef [ 487.436292] should_fail.cold+0xa/0xf [ 487.440114] ? setup_fault_attr+0x200/0x200 [ 487.444455] ? lock_acquire+0x170/0x3c0 [ 487.448452] __should_failslab+0x115/0x180 [ 487.452707] should_failslab+0x5/0x10 [ 487.456526] __kmalloc+0x2ab/0x3c0 [ 487.460092] ? __keyctl_dh_compute+0x512/0x13d0 [ 487.464778] __keyctl_dh_compute+0x512/0x13d0 [ 487.469298] ? dh_data_from_key+0x2a0/0x2a0 [ 487.473632] ? proc_fail_nth_write+0x95/0x1d0 [ 487.478190] ? __might_fault+0x11f/0x1d0 [ 487.482297] ? lock_downgrade+0x720/0x720 [ 487.486473] ? lock_acquire+0x170/0x3c0 [ 487.490458] ? __might_fault+0xef/0x1d0 [ 487.494446] ? __might_fault+0x192/0x1d0 [ 487.498526] keyctl_dh_compute+0xbf/0x120 [ 487.502701] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 487.507563] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 487.513210] __se_sys_keyctl+0x10f/0x3f0 [ 487.517290] do_syscall_64+0xf9/0x620 [ 487.521211] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 487.526409] RIP: 0033:0x466459 [ 487.529628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 487.548537] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 20:04:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 487.556626] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 487.563896] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 487.571249] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 487.578516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.585799] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 20:04:28 executing program 0 (fault-call:3 fault-nth:21): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000f0", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:28 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 20:04:28 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x500, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:28 executing program 5 (fault-call:3 fault-nth:8): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000fc", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 487.808293] FAULT_INJECTION: forcing a failure. [ 487.808293] name failslab, interval 1, probability 0, space 0, times 0 [ 487.871228] CPU: 0 PID: 20369 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 487.879146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.888508] Call Trace: [ 487.891202] dump_stack+0x1fc/0x2ef [ 487.894840] should_fail.cold+0xa/0xf [ 487.898649] ? setup_fault_attr+0x200/0x200 [ 487.902982] ? lock_acquire+0x170/0x3c0 [ 487.906981] __should_failslab+0x115/0x180 [ 487.911668] should_failslab+0x5/0x10 [ 487.915675] __kmalloc+0x2ab/0x3c0 [ 487.919227] ? mpi_alloc_limb_space+0x2f/0x50 [ 487.923737] mpi_alloc_limb_space+0x2f/0x50 [ 487.928079] mpi_powm+0xf28/0x1a30 [ 487.931646] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 487.936848] ? mpi_alloc+0x43/0x240 [ 487.940588] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 487.945621] ? kmem_cache_alloc_trace+0x323/0x380 [ 487.950485] dh_compute_value+0x34e/0x5c0 [ 487.954699] ? dh_exit_tfm+0x20/0x20 [ 487.958512] ? __lockdep_init_map+0x100/0x5a0 [ 487.963113] ? __lockdep_init_map+0x100/0x5a0 [ 487.967630] __keyctl_dh_compute+0x953/0x13d0 [ 487.972150] ? dh_data_from_key+0x2a0/0x2a0 [ 487.976589] ? proc_fail_nth_write+0x95/0x1d0 [ 487.981119] ? __might_fault+0x11f/0x1d0 [ 487.985465] ? __might_fault+0xef/0x1d0 [ 487.989467] ? __might_fault+0x192/0x1d0 [ 487.993733] keyctl_dh_compute+0xbf/0x120 [ 487.997910] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 488.002700] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 488.008097] __se_sys_keyctl+0x10f/0x3f0 [ 488.012182] do_syscall_64+0xf9/0x620 [ 488.016000] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 488.021202] RIP: 0033:0x466459 [ 488.024407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 488.043327] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 488.047328] FAULT_INJECTION: forcing a failure. [ 488.047328] name failslab, interval 1, probability 0, space 0, times 0 [ 488.051148] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 20:04:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 20:04:28 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x600, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 488.051157] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 488.051165] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 488.051173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 488.051182] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:28 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 488.265755] CPU: 0 PID: 20382 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 488.273661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.283016] Call Trace: [ 488.285625] dump_stack+0x1fc/0x2ef [ 488.289300] should_fail.cold+0xa/0xf [ 488.293204] ? setup_fault_attr+0x200/0x200 [ 488.297569] ? lock_acquire+0x170/0x3c0 [ 488.301562] __should_failslab+0x115/0x180 [ 488.305810] should_failslab+0x5/0x10 [ 488.309624] __kmalloc+0x2ab/0x3c0 [ 488.313264] ? crypto_create_tfm+0x79/0x2e0 [ 488.317594] ? up_read+0x17/0x110 [ 488.321063] crypto_create_tfm+0x79/0x2e0 [ 488.325329] crypto_alloc_tfm+0xff/0x230 [ 488.329409] __keyctl_dh_compute+0x55c/0x13d0 [ 488.333935] ? dh_data_from_key+0x2a0/0x2a0 [ 488.338269] ? proc_fail_nth_write+0x95/0x1d0 [ 488.342791] ? __might_fault+0x11f/0x1d0 [ 488.346961] ? lock_downgrade+0x720/0x720 [ 488.351124] ? lock_acquire+0x170/0x3c0 [ 488.355106] ? __might_fault+0xef/0x1d0 [ 488.359103] ? __might_fault+0x192/0x1d0 [ 488.363186] keyctl_dh_compute+0xbf/0x120 [ 488.367399] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 488.372183] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 488.377565] __se_sys_keyctl+0x10f/0x3f0 [ 488.381641] do_syscall_64+0xf9/0x620 [ 488.385454] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 488.389985] FAULT_INJECTION: forcing a failure. [ 488.389985] name failslab, interval 1, probability 0, space 0, times 0 [ 488.390650] RIP: 0033:0x466459 [ 488.390665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 488.390673] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 488.390687] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 488.390695] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 488.390715] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 488.453569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 20:04:28 executing program 0 (fault-call:3 fault-nth:22): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 20:04:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:28 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 488.460844] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 [ 488.468144] CPU: 1 PID: 20417 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 488.476041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.485402] Call Trace: [ 488.488029] dump_stack+0x1fc/0x2ef [ 488.491744] should_fail.cold+0xa/0xf [ 488.495572] ? setup_fault_attr+0x200/0x200 [ 488.499909] ? lock_acquire+0x170/0x3c0 [ 488.503902] __should_failslab+0x115/0x180 [ 488.508154] should_failslab+0x5/0x10 [ 488.511961] __kmalloc+0x2ab/0x3c0 [ 488.515511] ? mpi_alloc_limb_space+0x2f/0x50 [ 488.520024] mpi_alloc_limb_space+0x2f/0x50 [ 488.524367] mpihelp_mul_karatsuba_case+0x105/0xc00 [ 488.529401] ? mpihelp_divrem+0x5ff/0x13c0 [ 488.533830] ? mpihelp_mul+0x560/0x560 [ 488.537743] mpi_powm+0xec0/0x1a30 [ 488.541324] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 488.546561] ? mpi_alloc+0x43/0x240 [ 488.550207] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 488.555444] ? kmem_cache_alloc_trace+0x323/0x380 [ 488.560316] dh_compute_value+0x34e/0x5c0 20:04:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 488.564665] ? dh_exit_tfm+0x20/0x20 [ 488.568392] ? __lockdep_init_map+0x100/0x5a0 [ 488.572983] ? __lockdep_init_map+0x100/0x5a0 [ 488.577532] __keyctl_dh_compute+0x953/0x13d0 [ 488.582053] ? dh_data_from_key+0x2a0/0x2a0 [ 488.586401] ? proc_fail_nth_write+0x95/0x1d0 [ 488.590922] ? __might_fault+0x11f/0x1d0 [ 488.594999] ? __might_fault+0xef/0x1d0 [ 488.599436] ? __might_fault+0x192/0x1d0 [ 488.603925] keyctl_dh_compute+0xbf/0x120 [ 488.608537] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 488.613416] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 488.620429] __se_sys_keyctl+0x10f/0x3f0 [ 488.624771] do_syscall_64+0xf9/0x620 [ 488.629022] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 488.634224] RIP: 0033:0x466459 [ 488.637465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 488.657255] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 20:04:29 executing program 5 (fault-call:3 fault-nth:9): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x2) 20:04:29 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xa00, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 488.665110] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 488.672917] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 488.680378] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 488.688096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 488.695551] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 [ 488.766448] FAULT_INJECTION: forcing a failure. [ 488.766448] name failslab, interval 1, probability 0, space 0, times 0 20:04:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 488.809192] CPU: 1 PID: 20435 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 488.817472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.826924] Call Trace: [ 488.829532] dump_stack+0x1fc/0x2ef [ 488.833199] should_fail.cold+0xa/0xf [ 488.837012] ? setup_fault_attr+0x200/0x200 [ 488.841343] ? lock_acquire+0x170/0x3c0 [ 488.845433] __should_failslab+0x115/0x180 [ 488.849684] should_failslab+0x5/0x10 [ 488.853543] kmem_cache_alloc_trace+0x284/0x380 20:04:29 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xb00, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 488.858235] ? crypto_dh_decode_key+0x36c/0x4a0 [ 488.863275] mpi_alloc+0x43/0x240 [ 488.866739] mpi_read_raw_data+0xd9/0x3f0 [ 488.870897] ? mpi_free+0x10/0x150 [ 488.874451] dh_set_secret+0xe8/0x2a0 [ 488.878268] ? dh_compute_value+0x5c0/0x5c0 [ 488.882623] ? crypto_alloc_tfm+0x123/0x230 [ 488.886962] __keyctl_dh_compute+0x5e3/0x13d0 [ 488.891482] ? dh_data_from_key+0x2a0/0x2a0 [ 488.895820] ? proc_fail_nth_write+0x95/0x1d0 [ 488.900352] ? __might_fault+0x11f/0x1d0 [ 488.904447] ? lock_downgrade+0x720/0x720 [ 488.908608] ? lock_acquire+0x170/0x3c0 [ 488.913033] ? __might_fault+0xef/0x1d0 [ 488.917026] ? __might_fault+0x192/0x1d0 [ 488.921112] keyctl_dh_compute+0xbf/0x120 [ 488.925272] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 488.930400] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 488.935959] __se_sys_keyctl+0x10f/0x3f0 [ 488.940046] do_syscall_64+0xf9/0x620 [ 488.943860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 488.949245] RIP: 0033:0x466459 20:04:29 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xc00, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 488.952444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 488.971357] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 488.979180] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 488.986581] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 488.993876] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 489.001159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.008442] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:29 executing program 0 (fault-call:3 fault-nth:23): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000ff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x7) 20:04:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400001d", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:29 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xd00, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:29 executing program 5 (fault-call:3 fault-nth:10): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:29 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xe00, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 489.244345] FAULT_INJECTION: forcing a failure. [ 489.244345] name failslab, interval 1, probability 0, space 0, times 0 20:04:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xf) [ 489.290936] FAULT_INJECTION: forcing a failure. [ 489.290936] name failslab, interval 1, probability 0, space 0, times 0 [ 489.326538] CPU: 0 PID: 20475 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 489.334610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.344250] Call Trace: [ 489.346858] dump_stack+0x1fc/0x2ef [ 489.350539] should_fail.cold+0xa/0xf [ 489.354358] ? setup_fault_attr+0x200/0x200 [ 489.358689] ? lock_acquire+0x170/0x3c0 [ 489.362697] __should_failslab+0x115/0x180 [ 489.367390] should_failslab+0x5/0x10 [ 489.371476] __kmalloc+0x2ab/0x3c0 [ 489.375212] ? mpi_alloc_limb_space+0x2f/0x50 [ 489.379836] mpi_alloc_limb_space+0x2f/0x50 [ 489.384187] mpi_alloc+0x1a3/0x240 [ 489.387750] mpi_read_raw_data+0xd9/0x3f0 [ 489.392008] ? mpi_free+0x10/0x150 [ 489.395568] dh_set_secret+0xe8/0x2a0 [ 489.399389] ? dh_compute_value+0x5c0/0x5c0 [ 489.403863] ? crypto_alloc_tfm+0x123/0x230 [ 489.408231] __keyctl_dh_compute+0x5e3/0x13d0 [ 489.412747] ? dh_data_from_key+0x2a0/0x2a0 [ 489.417101] ? proc_fail_nth_write+0x95/0x1d0 [ 489.421630] ? __might_fault+0x11f/0x1d0 [ 489.425848] ? lock_downgrade+0x720/0x720 [ 489.430019] ? lock_acquire+0x170/0x3c0 [ 489.434075] ? __might_fault+0xef/0x1d0 [ 489.438080] ? __might_fault+0x192/0x1d0 [ 489.442163] keyctl_dh_compute+0xbf/0x120 [ 489.446329] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 489.451108] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 489.457533] __se_sys_keyctl+0x10f/0x3f0 [ 489.461605] do_syscall_64+0xf9/0x620 [ 489.465427] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 489.470627] RIP: 0033:0x466459 20:04:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 489.473832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 489.492853] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 489.500581] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 489.507949] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 489.515271] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 489.522551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.529834] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:30 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 489.546983] CPU: 1 PID: 20479 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 489.554992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.564358] Call Trace: [ 489.566967] dump_stack+0x1fc/0x2ef [ 489.570616] should_fail.cold+0xa/0xf [ 489.574438] ? setup_fault_attr+0x200/0x200 [ 489.578780] ? lock_acquire+0x170/0x3c0 [ 489.582780] __should_failslab+0x115/0x180 [ 489.587048] should_failslab+0x5/0x10 [ 489.590880] kmem_cache_alloc_trace+0x284/0x380 [ 489.598270] mpihelp_mul_karatsuba_case+0x929/0xc00 [ 489.603326] ? mpihelp_divrem+0x5ff/0x13c0 [ 489.607686] ? mpihelp_mul+0x560/0x560 [ 489.611597] mpi_powm+0xec0/0x1a30 [ 489.615252] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 489.620751] ? mpi_alloc+0x43/0x240 [ 489.624494] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 489.629903] ? kmem_cache_alloc_trace+0x323/0x380 [ 489.634857] dh_compute_value+0x34e/0x5c0 [ 489.640518] ? dh_exit_tfm+0x20/0x20 [ 489.644243] ? __lockdep_init_map+0x100/0x5a0 [ 489.648750] ? __lockdep_init_map+0x100/0x5a0 [ 489.653269] __keyctl_dh_compute+0x953/0x13d0 [ 489.657874] ? dh_data_from_key+0x2a0/0x2a0 [ 489.662297] ? proc_fail_nth_write+0x95/0x1d0 [ 489.666914] ? __might_fault+0x11f/0x1d0 [ 489.670990] ? __might_fault+0xef/0x1d0 [ 489.675412] ? __might_fault+0x192/0x1d0 [ 489.679664] keyctl_dh_compute+0xbf/0x120 [ 489.684033] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 489.688814] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 489.694624] __se_sys_keyctl+0x10f/0x3f0 [ 489.699359] do_syscall_64+0xf9/0x620 [ 489.704298] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 489.709541] RIP: 0033:0x466459 [ 489.712743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 489.732002] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 489.739725] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 489.747347] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 489.754650] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 489.761928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.769298] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:30 executing program 0 (fault-call:3 fault-nth:24): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:30 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x1500, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000ff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xf0) 20:04:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:30 executing program 5 (fault-call:3 fault-nth:11): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x700) [ 489.937257] FAULT_INJECTION: forcing a failure. [ 489.937257] name failslab, interval 1, probability 0, space 0, times 0 [ 489.953365] FAULT_INJECTION: forcing a failure. [ 489.953365] name failslab, interval 1, probability 0, space 0, times 0 [ 490.010082] CPU: 0 PID: 20525 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 490.018011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.027375] Call Trace: [ 490.029972] dump_stack+0x1fc/0x2ef [ 490.033863] should_fail.cold+0xa/0xf [ 490.037688] ? setup_fault_attr+0x200/0x200 [ 490.042016] ? lock_acquire+0x170/0x3c0 [ 490.046027] __should_failslab+0x115/0x180 [ 490.050289] should_failslab+0x5/0x10 [ 490.054095] kmem_cache_alloc_trace+0x284/0x380 [ 490.058871] mpi_alloc+0x43/0x240 [ 490.062426] mpi_read_raw_data+0xd9/0x3f0 [ 490.066609] dh_set_secret+0x146/0x2a0 [ 490.070503] ? dh_compute_value+0x5c0/0x5c0 [ 490.074843] ? crypto_alloc_tfm+0x123/0x230 [ 490.079178] __keyctl_dh_compute+0x5e3/0x13d0 [ 490.083687] ? dh_data_from_key+0x2a0/0x2a0 [ 490.088024] ? proc_fail_nth_write+0x95/0x1d0 [ 490.092576] ? __might_fault+0x11f/0x1d0 [ 490.096647] ? lock_downgrade+0x720/0x720 [ 490.100800] ? lock_acquire+0x170/0x3c0 [ 490.104777] ? __might_fault+0xef/0x1d0 [ 490.108769] ? __might_fault+0x192/0x1d0 [ 490.112843] keyctl_dh_compute+0xbf/0x120 [ 490.117023] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 490.122181] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 490.127579] __se_sys_keyctl+0x10f/0x3f0 [ 490.131651] do_syscall_64+0xf9/0x620 [ 490.135464] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 490.140658] RIP: 0033:0x466459 20:04:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000ff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 490.143965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 490.163048] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 490.170759] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 490.178039] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 490.185332] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 490.192603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.199892] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 [ 490.244459] CPU: 0 PID: 20526 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 490.252385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.261770] Call Trace: [ 490.264381] dump_stack+0x1fc/0x2ef [ 490.268030] should_fail.cold+0xa/0xf [ 490.271850] ? setup_fault_attr+0x200/0x200 [ 490.276188] ? lock_acquire+0x170/0x3c0 [ 490.280188] __should_failslab+0x115/0x180 [ 490.284440] should_failslab+0x5/0x10 [ 490.288257] __kmalloc+0x2ab/0x3c0 [ 490.291814] ? mpi_alloc_limb_space+0x2f/0x50 [ 490.296319] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 490.301964] mpi_alloc_limb_space+0x2f/0x50 [ 490.306401] mpihelp_mul_karatsuba_case+0x105/0xc00 [ 490.312045] ? setup_fault_attr+0x200/0x200 [ 490.316748] ? lock_acquire+0x170/0x3c0 [ 490.321027] ? mpihelp_mul+0x560/0x560 [ 490.325834] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 490.332050] ? kmem_cache_alloc_trace+0x323/0x380 [ 490.337229] mpihelp_mul_karatsuba_case+0x5be/0xc00 [ 490.342482] ? mpihelp_divrem+0x5ff/0x13c0 [ 490.347090] ? mpihelp_mul+0x560/0x560 [ 490.351188] mpi_powm+0xec0/0x1a30 [ 490.354847] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 490.360050] ? mpi_alloc+0x43/0x240 [ 490.363787] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 490.369340] ? kmem_cache_alloc_trace+0x323/0x380 [ 490.374761] dh_compute_value+0x34e/0x5c0 [ 490.379892] ? dh_exit_tfm+0x20/0x20 [ 490.383990] ? __lockdep_init_map+0x100/0x5a0 [ 490.388679] ? __lockdep_init_map+0x100/0x5a0 [ 490.393195] __keyctl_dh_compute+0x953/0x13d0 [ 490.397956] ? dh_data_from_key+0x2a0/0x2a0 [ 490.403870] ? proc_fail_nth_write+0x95/0x1d0 [ 490.408399] ? __might_fault+0x11f/0x1d0 [ 490.412483] ? __might_fault+0xef/0x1d0 [ 490.416909] ? __might_fault+0x192/0x1d0 [ 490.420990] keyctl_dh_compute+0xbf/0x120 [ 490.425611] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 490.431831] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 490.437507] __se_sys_keyctl+0x10f/0x3f0 [ 490.441594] do_syscall_64+0xf9/0x620 [ 490.445437] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 490.450642] RIP: 0033:0x466459 [ 490.453872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 490.473050] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 490.480877] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 20:04:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000ff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xf00) 20:04:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 490.488526] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 490.498565] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 490.505860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.513352] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:31 executing program 0 (fault-call:3 fault-nth:25): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:31 executing program 5 (fault-call:3 fault-nth:12): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:31 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x1700, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xf000) 20:04:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 490.703626] FAULT_INJECTION: forcing a failure. [ 490.703626] name failslab, interval 1, probability 0, space 0, times 0 [ 490.745756] FAULT_INJECTION: forcing a failure. [ 490.745756] name failslab, interval 1, probability 0, space 0, times 0 [ 490.772245] CPU: 1 PID: 20570 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 490.781487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.791828] Call Trace: 20:04:31 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x1800, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 490.794429] dump_stack+0x1fc/0x2ef [ 490.798066] should_fail.cold+0xa/0xf [ 490.802331] ? setup_fault_attr+0x200/0x200 [ 490.806695] ? lock_acquire+0x170/0x3c0 [ 490.810689] __should_failslab+0x115/0x180 [ 490.814939] should_failslab+0x5/0x10 [ 490.819274] __kmalloc+0x2ab/0x3c0 [ 490.823018] ? mpi_alloc_limb_space+0x2f/0x50 [ 490.828084] mpi_alloc_limb_space+0x2f/0x50 [ 490.832427] mpi_alloc+0x1a3/0x240 [ 490.836259] mpi_read_raw_data+0xd9/0x3f0 [ 490.840447] dh_set_secret+0x146/0x2a0 [ 490.844432] ? dh_compute_value+0x5c0/0x5c0 [ 490.848949] ? crypto_alloc_tfm+0x123/0x230 [ 490.853301] __keyctl_dh_compute+0x5e3/0x13d0 [ 490.857903] ? dh_data_from_key+0x2a0/0x2a0 [ 490.862234] ? proc_fail_nth_write+0x95/0x1d0 [ 490.866758] ? __might_fault+0x11f/0x1d0 [ 490.871377] ? lock_downgrade+0x720/0x720 [ 490.875532] ? lock_acquire+0x170/0x3c0 [ 490.879509] ? __might_fault+0xef/0x1d0 [ 490.883492] ? __might_fault+0x192/0x1d0 [ 490.887579] keyctl_dh_compute+0xbf/0x120 [ 490.891736] ? __keyctl_dh_compute+0x13d0/0x13d0 20:04:31 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x1d00, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 490.896507] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 490.901880] __se_sys_keyctl+0x10f/0x3f0 [ 490.905955] do_syscall_64+0xf9/0x620 [ 490.909772] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 490.914963] RIP: 0033:0x466459 [ 490.918190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 490.937106] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 20:04:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400007f", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 490.944826] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 490.952107] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 490.959472] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 490.966772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.974052] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 [ 490.999745] CPU: 0 PID: 20578 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 491.007679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.017040] Call Trace: [ 491.019643] dump_stack+0x1fc/0x2ef [ 491.023277] should_fail.cold+0xa/0xf [ 491.027091] ? setup_fault_attr+0x200/0x200 [ 491.031422] ? lock_acquire+0x170/0x3c0 [ 491.035416] __should_failslab+0x115/0x180 [ 491.039669] should_failslab+0x5/0x10 [ 491.043484] __kmalloc+0x2ab/0x3c0 [ 491.047048] ? mpi_alloc_limb_space+0x2f/0x50 [ 491.051570] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 491.056173] mpi_alloc_limb_space+0x2f/0x50 [ 491.060515] mpi_powm+0xf28/0x1a30 [ 491.064167] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 491.069459] ? mpi_alloc+0x43/0x240 [ 491.073101] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 491.078136] ? kmem_cache_alloc_trace+0x323/0x380 [ 491.083005] dh_compute_value+0x34e/0x5c0 [ 491.087176] ? dh_exit_tfm+0x20/0x20 [ 491.090900] ? __lockdep_init_map+0x100/0x5a0 [ 491.095404] ? __lockdep_init_map+0x100/0x5a0 [ 491.099923] __keyctl_dh_compute+0x953/0x13d0 [ 491.104615] ? dh_data_from_key+0x2a0/0x2a0 [ 491.108951] ? proc_fail_nth_write+0x95/0x1d0 [ 491.113466] ? __might_fault+0x11f/0x1d0 [ 491.117554] ? __might_fault+0xef/0x1d0 [ 491.122248] ? __might_fault+0x192/0x1d0 [ 491.126323] keyctl_dh_compute+0xbf/0x120 [ 491.130480] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 491.135304] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 491.140682] __se_sys_keyctl+0x10f/0x3f0 [ 491.144756] do_syscall_64+0xf9/0x620 [ 491.148571] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 491.153783] RIP: 0033:0x466459 [ 491.157012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 491.176010] RSP: 002b:00007fb7b1c9f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 491.183826] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 491.191250] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 20:04:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x34000) 20:04:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x400300) [ 491.198617] RBP: 00007fb7b1c9f1d0 R08: 0000000020000000 R09: 0000000000000000 [ 491.205897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 491.213194] R13: 00007ffdf7a1479f R14: 00007fb7b1c9f300 R15: 0000000000022000 20:04:31 executing program 0 (fault-call:3 fault-nth:26): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:31 executing program 5 (fault-call:3 fault-nth:13): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xf0ffff) 20:04:31 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x1e00, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400009e", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 491.363051] FAULT_INJECTION: forcing a failure. [ 491.363051] name failslab, interval 1, probability 0, space 0, times 0 [ 491.365347] nla_parse: 44 callbacks suppressed [ 491.365356] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.392599] CPU: 0 PID: 20617 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 491.400504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.409976] Call Trace: [ 491.412586] dump_stack+0x1fc/0x2ef [ 491.416229] should_fail.cold+0xa/0xf [ 491.420136] ? setup_fault_attr+0x200/0x200 [ 491.424463] ? lock_acquire+0x170/0x3c0 [ 491.428444] __should_failslab+0x115/0x180 [ 491.432738] should_failslab+0x5/0x10 [ 491.436542] kmem_cache_alloc_trace+0x284/0x380 [ 491.441240] mpi_alloc+0x43/0x240 [ 491.444698] mpi_read_raw_data+0xd9/0x3f0 [ 491.448855] dh_set_secret+0x185/0x2a0 [ 491.452752] ? dh_compute_value+0x5c0/0x5c0 [ 491.457207] ? crypto_alloc_tfm+0x123/0x230 [ 491.461813] __keyctl_dh_compute+0x5e3/0x13d0 [ 491.466326] ? dh_data_from_key+0x2a0/0x2a0 [ 491.470657] ? proc_fail_nth_write+0x95/0x1d0 [ 491.475178] ? __might_fault+0x11f/0x1d0 [ 491.479274] ? lock_downgrade+0x720/0x720 [ 491.483452] ? lock_acquire+0x170/0x3c0 [ 491.487441] ? __might_fault+0xef/0x1d0 [ 491.491426] ? __might_fault+0x192/0x1d0 [ 491.495496] keyctl_dh_compute+0xbf/0x120 [ 491.499746] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 491.504600] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 491.509967] __se_sys_keyctl+0x10f/0x3f0 [ 491.514054] do_syscall_64+0xf9/0x620 [ 491.517861] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 491.523061] RIP: 0033:0x466459 [ 491.526252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 491.545165] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 491.552977] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 20:04:32 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x2714, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 491.560260] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 491.567557] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 491.574837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 491.582117] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x1000000) [ 491.613676] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:04:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000f0", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:32 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x289b, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 491.724726] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:04:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x2000000) [ 491.825903] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.891451] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.912603] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:04:32 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000fc", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:32 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x2a00, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x7000000) 20:04:32 executing program 5 (fault-call:3 fault-nth:14): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 492.190000] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 492.198147] FAULT_INJECTION: forcing a failure. [ 492.198147] name failslab, interval 1, probability 0, space 0, times 0 [ 492.220079] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:04:32 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x2e00, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 492.239058] CPU: 1 PID: 20668 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 492.246990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.256328] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 492.256536] Call Trace: [ 492.268670] dump_stack+0x1fc/0x2ef [ 492.272432] should_fail.cold+0xa/0xf [ 492.276267] ? setup_fault_attr+0x200/0x200 [ 492.280630] ? lock_acquire+0x170/0x3c0 [ 492.284620] __should_failslab+0x115/0x180 [ 492.288868] should_failslab+0x5/0x10 [ 492.292674] __kmalloc+0x2ab/0x3c0 [ 492.296229] ? mpi_alloc_limb_space+0x2f/0x50 [ 492.301009] mpi_alloc_limb_space+0x2f/0x50 [ 492.305780] mpi_alloc+0x1a3/0x240 [ 492.309336] mpi_read_raw_data+0xd9/0x3f0 [ 492.313680] dh_set_secret+0x185/0x2a0 [ 492.318652] ? dh_compute_value+0x5c0/0x5c0 [ 492.323122] ? crypto_alloc_tfm+0x123/0x230 [ 492.327466] __keyctl_dh_compute+0x5e3/0x13d0 [ 492.331997] ? dh_data_from_key+0x2a0/0x2a0 [ 492.336338] ? proc_fail_nth_write+0x95/0x1d0 [ 492.340865] ? __might_fault+0x11f/0x1d0 [ 492.344948] ? lock_downgrade+0x720/0x720 [ 492.349202] ? lock_acquire+0x170/0x3c0 [ 492.353376] ? __might_fault+0xef/0x1d0 [ 492.357567] ? __might_fault+0x192/0x1d0 [ 492.361735] keyctl_dh_compute+0xbf/0x120 [ 492.365918] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 492.370693] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 492.377241] __se_sys_keyctl+0x10f/0x3f0 [ 492.381325] do_syscall_64+0xf9/0x620 [ 492.385153] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 492.390444] RIP: 0033:0x466459 [ 492.393674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 492.413121] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 492.421639] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 492.428917] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 20:04:33 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x3902, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 492.436295] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 492.443680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 492.451140] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xf000000) [ 492.518276] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:04:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:33 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x3a00, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x8447a9f9) 20:04:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:33 executing program 5 (fault-call:3 fault-nth:15): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:33 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x2, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 492.930119] FAULT_INJECTION: forcing a failure. [ 492.930119] name failslab, interval 1, probability 0, space 0, times 0 [ 492.956671] CPU: 0 PID: 20720 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 492.964588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.973951] Call Trace: [ 492.976564] dump_stack+0x1fc/0x2ef [ 492.980219] should_fail.cold+0xa/0xf [ 492.984131] ? setup_fault_attr+0x200/0x200 [ 492.988462] ? lock_acquire+0x170/0x3c0 [ 492.992475] __should_failslab+0x115/0x180 [ 492.996787] should_failslab+0x5/0x10 [ 493.000624] __kmalloc+0x2ab/0x3c0 [ 493.004195] ? __keyctl_dh_compute+0x69e/0x13d0 [ 493.009317] __keyctl_dh_compute+0x69e/0x13d0 [ 493.013874] ? dh_data_from_key+0x2a0/0x2a0 [ 493.018211] ? proc_fail_nth_write+0x95/0x1d0 [ 493.023000] ? __might_fault+0x11f/0x1d0 [ 493.027211] ? lock_downgrade+0x720/0x720 [ 493.031460] ? lock_acquire+0x170/0x3c0 [ 493.035454] ? __might_fault+0xef/0x1d0 [ 493.039455] ? __might_fault+0x192/0x1d0 [ 493.043548] keyctl_dh_compute+0xbf/0x120 [ 493.047768] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 493.052668] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 493.058161] __se_sys_keyctl+0x10f/0x3f0 [ 493.062245] do_syscall_64+0xf9/0x620 [ 493.066165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 493.071364] RIP: 0033:0x466459 [ 493.074569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 493.095330] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 493.103488] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 493.110975] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 493.119214] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 20:04:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000ff", @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:33 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x3, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x9effffff) 20:04:33 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x3c05, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 493.126600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 493.134582] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:33 executing program 5 (fault-call:3 fault-nth:16): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:33 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x4, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:33 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x3cb2, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xf0ffffff) [ 493.345364] FAULT_INJECTION: forcing a failure. [ 493.345364] name failslab, interval 1, probability 0, space 0, times 0 [ 493.399561] CPU: 0 PID: 20761 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 493.407492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.416865] Call Trace: [ 493.419472] dump_stack+0x1fc/0x2ef [ 493.423146] should_fail.cold+0xa/0xf [ 493.426981] ? setup_fault_attr+0x200/0x200 [ 493.431359] ? lock_acquire+0x170/0x3c0 [ 493.435488] __should_failslab+0x115/0x180 [ 493.439846] should_failslab+0x5/0x10 [ 493.443670] __kmalloc+0x2ab/0x3c0 [ 493.447236] ? __keyctl_dh_compute+0x725/0x13d0 [ 493.451949] ? sg_init_one+0xd9/0x180 [ 493.455777] __keyctl_dh_compute+0x725/0x13d0 [ 493.460410] ? dh_data_from_key+0x2a0/0x2a0 [ 493.464786] ? proc_fail_nth_write+0x95/0x1d0 [ 493.469412] ? __might_fault+0x11f/0x1d0 [ 493.473506] ? lock_downgrade+0x720/0x720 [ 493.480288] ? lock_acquire+0x170/0x3c0 [ 493.484370] ? __might_fault+0xef/0x1d0 [ 493.488377] ? __might_fault+0x192/0x1d0 [ 493.492477] keyctl_dh_compute+0xbf/0x120 [ 493.496648] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 493.501436] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 493.506825] __se_sys_keyctl+0x10f/0x3f0 [ 493.510926] do_syscall_64+0xf9/0x620 [ 493.514767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 493.519981] RIP: 0033:0x466459 [ 493.523380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:04:34 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x5, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:34 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x4000, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xf9a94784) [ 493.542297] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 493.550719] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 493.558034] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 493.565328] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 493.572621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 493.579904] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:34 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x4b01, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:34 executing program 5 (fault-call:3 fault-nth:17): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:34 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x6, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xfffff000) 20:04:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:34 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x5abd, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:34 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x7, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 493.972823] FAULT_INJECTION: forcing a failure. [ 493.972823] name failslab, interval 1, probability 0, space 0, times 0 20:04:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xffffff7f) 20:04:34 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x6c62, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 494.048440] CPU: 0 PID: 20829 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 494.056378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.066440] Call Trace: [ 494.069046] dump_stack+0x1fc/0x2ef [ 494.072777] should_fail.cold+0xa/0xf [ 494.076621] ? setup_fault_attr+0x200/0x200 [ 494.080958] ? lock_acquire+0x170/0x3c0 [ 494.084959] __should_failslab+0x115/0x180 [ 494.089241] should_failslab+0x5/0x10 [ 494.093056] kmem_cache_alloc_trace+0x284/0x380 [ 494.097740] ? should_fail+0x142/0x7b0 [ 494.102372] mpi_alloc+0x43/0x240 [ 494.106099] dh_compute_value+0x8b/0x5c0 [ 494.110183] ? dh_exit_tfm+0x20/0x20 [ 494.113946] ? __lockdep_init_map+0x100/0x5a0 [ 494.118921] ? __lockdep_init_map+0x100/0x5a0 [ 494.123450] __keyctl_dh_compute+0x953/0x13d0 [ 494.127976] ? dh_data_from_key+0x2a0/0x2a0 [ 494.132858] ? proc_fail_nth_write+0x95/0x1d0 [ 494.137404] ? __might_fault+0x11f/0x1d0 [ 494.141481] ? __might_fault+0xef/0x1d0 20:04:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 494.145473] ? __might_fault+0x192/0x1d0 [ 494.149626] keyctl_dh_compute+0xbf/0x120 [ 494.153788] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 494.158666] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 494.164051] __se_sys_keyctl+0x10f/0x3f0 [ 494.168222] do_syscall_64+0xf9/0x620 [ 494.172041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 494.177251] RIP: 0033:0x466459 20:04:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 494.180456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 494.199615] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 494.207351] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 494.214637] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 494.222008] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 494.229600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 494.237030] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:34 executing program 5 (fault-call:3 fault-nth:18): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:34 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x7623, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xffffff9e) 20:04:35 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x8, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 494.403261] FAULT_INJECTION: forcing a failure. [ 494.403261] name failslab, interval 1, probability 0, space 0, times 0 [ 494.445653] CPU: 1 PID: 20864 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 494.453591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.463134] Call Trace: [ 494.465740] dump_stack+0x1fc/0x2ef [ 494.469385] should_fail.cold+0xa/0xf [ 494.473201] ? setup_fault_attr+0x200/0x200 [ 494.477534] ? lock_acquire+0x170/0x3c0 [ 494.481539] __should_failslab+0x115/0x180 [ 494.485824] should_failslab+0x5/0x10 [ 494.489633] __kmalloc+0x2ab/0x3c0 [ 494.493191] ? mpi_alloc_limb_space+0x2f/0x50 [ 494.497713] mpi_alloc_limb_space+0x2f/0x50 [ 494.502043] mpi_powm+0x43d/0x1a30 [ 494.505611] ? should_fail+0x142/0x7b0 [ 494.509511] ? fs_reclaim_release+0xd0/0x110 [ 494.513934] ? setup_fault_attr+0x200/0x200 [ 494.518264] ? lock_acquire+0x170/0x3c0 [ 494.522255] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 494.527461] ? mpi_alloc+0x43/0x240 [ 494.531102] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 494.536129] ? kmem_cache_alloc_trace+0x323/0x380 [ 494.541011] dh_compute_value+0x34e/0x5c0 [ 494.545178] ? dh_exit_tfm+0x20/0x20 [ 494.548911] ? __lockdep_init_map+0x100/0x5a0 [ 494.553419] ? __lockdep_init_map+0x100/0x5a0 [ 494.557926] __keyctl_dh_compute+0x953/0x13d0 [ 494.562445] ? dh_data_from_key+0x2a0/0x2a0 [ 494.566782] ? proc_fail_nth_write+0x95/0x1d0 [ 494.571301] ? __might_fault+0x11f/0x1d0 [ 494.575421] ? __might_fault+0xef/0x1d0 [ 494.579423] ? __might_fault+0x192/0x1d0 [ 494.583502] keyctl_dh_compute+0xbf/0x120 [ 494.587663] ? __keyctl_dh_compute+0x13d0/0x13d0 20:04:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 494.592437] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 494.597829] __se_sys_keyctl+0x10f/0x3f0 [ 494.601911] do_syscall_64+0xf9/0x620 [ 494.605734] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 494.610935] RIP: 0033:0x466459 [ 494.614173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 494.633080] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 20:04:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xfffffff0) 20:04:35 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x80fb, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:35 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x9, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 494.640805] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 494.648081] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 494.655360] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 494.662641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 494.669922] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:35 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x91e5, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:35 executing program 5 (fault-call:3 fault-nth:19): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x40030000000000) 20:04:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:35 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xa, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:35 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x9507, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 494.990970] FAULT_INJECTION: forcing a failure. [ 494.990970] name failslab, interval 1, probability 0, space 0, times 0 20:04:35 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xb, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 495.046884] CPU: 1 PID: 20923 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 495.054806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.064170] Call Trace: [ 495.066779] dump_stack+0x1fc/0x2ef [ 495.070420] should_fail.cold+0xa/0xf [ 495.074237] ? setup_fault_attr+0x200/0x200 [ 495.078609] ? lock_acquire+0x170/0x3c0 [ 495.082616] __should_failslab+0x115/0x180 [ 495.086871] should_failslab+0x5/0x10 [ 495.090688] __kmalloc+0x2ab/0x3c0 [ 495.094242] ? mpi_resize+0x185/0x230 [ 495.098108] mpi_resize+0x185/0x230 [ 495.101752] mpi_powm+0x706/0x1a30 [ 495.105334] ? fs_reclaim_release+0xd0/0x110 [ 495.109755] ? lock_acquire+0x170/0x3c0 [ 495.113747] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 495.118949] ? mpi_alloc+0x43/0x240 [ 495.122588] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 495.127631] ? kmem_cache_alloc_trace+0x323/0x380 [ 495.132492] dh_compute_value+0x34e/0x5c0 [ 495.136662] ? dh_exit_tfm+0x20/0x20 [ 495.140386] ? __lockdep_init_map+0x100/0x5a0 20:04:35 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xc, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 495.144913] ? __lockdep_init_map+0x100/0x5a0 [ 495.149420] __keyctl_dh_compute+0x953/0x13d0 [ 495.153943] ? dh_data_from_key+0x2a0/0x2a0 [ 495.158290] ? proc_fail_nth_write+0x95/0x1d0 [ 495.162801] ? __might_fault+0x11f/0x1d0 [ 495.166873] ? __might_fault+0xef/0x1d0 [ 495.170862] ? __might_fault+0x192/0x1d0 [ 495.174938] keyctl_dh_compute+0xbf/0x120 [ 495.179105] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 495.183901] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 495.189275] __se_sys_keyctl+0x10f/0x3f0 [ 495.193347] do_syscall_64+0xf9/0x620 20:04:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xf0ffffffffffff) [ 495.197164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 495.202365] RIP: 0033:0x466459 [ 495.205574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 495.224569] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 495.232292] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 495.239571] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 20:04:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 495.246875] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 495.254276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 495.261552] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:36 executing program 5 (fault-call:3 fault-nth:20): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:36 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x98fe, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x100000000000000) 20:04:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:36 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xd, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:36 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xa8b4, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 495.513723] FAULT_INJECTION: forcing a failure. [ 495.513723] name failslab, interval 1, probability 0, space 0, times 0 20:04:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x200000000000000) [ 495.597985] CPU: 0 PID: 20967 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 495.606091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.615456] Call Trace: [ 495.618061] dump_stack+0x1fc/0x2ef [ 495.621702] should_fail.cold+0xa/0xf [ 495.625698] ? setup_fault_attr+0x200/0x200 [ 495.630040] ? lock_acquire+0x170/0x3c0 [ 495.634062] __should_failslab+0x115/0x180 [ 495.638321] should_failslab+0x5/0x10 [ 495.642139] __kmalloc+0x2ab/0x3c0 [ 495.645693] ? mpi_alloc_limb_space+0x2f/0x50 [ 495.650205] mpi_alloc_limb_space+0x2f/0x50 [ 495.654549] mpi_powm+0xb56/0x1a30 [ 495.658246] ? fs_reclaim_release+0xd0/0x110 [ 495.662931] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 495.668151] ? mpi_alloc+0x43/0x240 [ 495.671794] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 495.676824] ? kmem_cache_alloc_trace+0x323/0x380 [ 495.681795] dh_compute_value+0x34e/0x5c0 [ 495.685964] ? dh_exit_tfm+0x20/0x20 [ 495.689696] ? __lockdep_init_map+0x100/0x5a0 [ 495.694207] ? __lockdep_init_map+0x100/0x5a0 [ 495.698735] __keyctl_dh_compute+0x953/0x13d0 [ 495.703349] ? dh_data_from_key+0x2a0/0x2a0 [ 495.707706] ? proc_fail_nth_write+0x95/0x1d0 [ 495.712237] ? __might_fault+0x11f/0x1d0 [ 495.716398] ? __might_fault+0xef/0x1d0 [ 495.720387] ? __might_fault+0x192/0x1d0 [ 495.724466] keyctl_dh_compute+0xbf/0x120 [ 495.728622] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 495.733402] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 495.738776] __se_sys_keyctl+0x10f/0x3f0 [ 495.742851] do_syscall_64+0xf9/0x620 [ 495.746662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 495.751854] RIP: 0033:0x466459 [ 495.755047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 495.774488] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 495.782383] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 495.789699] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 20:04:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:36 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xb23c, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:36 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xb2d1, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 495.796981] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 495.804383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 495.811682] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:36 executing program 5 (fault-call:3 fault-nth:21): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:36 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xe, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x700000000000000) 20:04:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:36 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xba00, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 495.980832] FAULT_INJECTION: forcing a failure. [ 495.980832] name failslab, interval 1, probability 0, space 0, times 0 [ 496.010413] CPU: 1 PID: 21010 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 496.018341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.028510] Call Trace: [ 496.031137] dump_stack+0x1fc/0x2ef [ 496.034776] should_fail.cold+0xa/0xf [ 496.038968] ? setup_fault_attr+0x200/0x200 [ 496.043392] ? lock_acquire+0x170/0x3c0 [ 496.047400] __should_failslab+0x115/0x180 [ 496.051737] should_failslab+0x5/0x10 [ 496.055638] __kmalloc+0x2ab/0x3c0 [ 496.059211] ? mpi_alloc_limb_space+0x2f/0x50 [ 496.063721] mpi_alloc_limb_space+0x2f/0x50 [ 496.068053] mpi_powm+0xf28/0x1a30 [ 496.071643] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 496.077122] ? mpi_alloc+0x43/0x240 [ 496.082152] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 496.088502] ? kmem_cache_alloc_trace+0x323/0x380 [ 496.094349] dh_compute_value+0x34e/0x5c0 [ 496.098528] ? dh_exit_tfm+0x20/0x20 [ 496.102346] ? __lockdep_init_map+0x100/0x5a0 [ 496.106890] ? __lockdep_init_map+0x100/0x5a0 [ 496.111420] __keyctl_dh_compute+0x953/0x13d0 [ 496.116346] ? dh_data_from_key+0x2a0/0x2a0 [ 496.121033] ? proc_fail_nth_write+0x95/0x1d0 [ 496.126511] ? __might_fault+0x11f/0x1d0 [ 496.130597] ? __might_fault+0xef/0x1d0 [ 496.134702] ? __might_fault+0x192/0x1d0 [ 496.139493] keyctl_dh_compute+0xbf/0x120 [ 496.143791] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 496.148868] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 496.157590] __se_sys_keyctl+0x10f/0x3f0 [ 496.161706] do_syscall_64+0xf9/0x620 [ 496.165538] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 496.171271] RIP: 0033:0x466459 20:04:36 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0xf, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 496.174484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 496.193526] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 496.201509] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 496.208967] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 496.216545] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 20:04:36 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xd5f4, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 496.224369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 496.235660] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xf00000000000000) 20:04:36 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xd864, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 496.370832] nla_parse: 68 callbacks suppressed [ 496.370842] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:04:37 executing program 5 (fault-call:3 fault-nth:22): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:37 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x10, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:37 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xe6f7, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 496.435105] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.454374] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:04:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x9effffff00000000) [ 496.519659] FAULT_INJECTION: forcing a failure. [ 496.519659] name failslab, interval 1, probability 0, space 0, times 0 [ 496.593019] CPU: 1 PID: 21055 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 496.600959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.610436] Call Trace: [ 496.613140] dump_stack+0x1fc/0x2ef [ 496.616791] should_fail.cold+0xa/0xf [ 496.620626] ? setup_fault_attr+0x200/0x200 [ 496.624968] ? lock_acquire+0x170/0x3c0 [ 496.628988] __should_failslab+0x115/0x180 [ 496.633255] should_failslab+0x5/0x10 [ 496.637067] __kmalloc+0x2ab/0x3c0 [ 496.640655] ? mpi_alloc_limb_space+0x2f/0x50 [ 496.645297] mpi_alloc_limb_space+0x2f/0x50 [ 496.649652] mpihelp_mul_karatsuba_case+0x105/0xc00 [ 496.654697] ? mpihelp_divrem+0x5ff/0x13c0 [ 496.658954] ? mpihelp_mul+0x560/0x560 [ 496.662862] mpi_powm+0xec0/0x1a30 [ 496.666435] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 496.671650] ? mpi_alloc+0x43/0x240 [ 496.675294] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 496.680594] ? kmem_cache_alloc_trace+0x323/0x380 [ 496.685475] dh_compute_value+0x34e/0x5c0 [ 496.689654] ? dh_exit_tfm+0x20/0x20 [ 496.693405] ? __lockdep_init_map+0x100/0x5a0 [ 496.698101] ? __lockdep_init_map+0x100/0x5a0 [ 496.702877] __keyctl_dh_compute+0x953/0x13d0 [ 496.707395] ? dh_data_from_key+0x2a0/0x2a0 [ 496.711730] ? proc_fail_nth_write+0x95/0x1d0 [ 496.716245] ? __might_fault+0x11f/0x1d0 [ 496.720322] ? __might_fault+0xef/0x1d0 [ 496.724315] ? __might_fault+0x192/0x1d0 [ 496.728397] keyctl_dh_compute+0xbf/0x120 [ 496.732565] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 496.737343] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 496.741125] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.743161] __se_sys_keyctl+0x10f/0x3f0 [ 496.743182] do_syscall_64+0xf9/0x620 [ 496.743203] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 496.765033] RIP: 0033:0x466459 [ 496.768236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:04:37 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xf0d8, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:37 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x11, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 496.775359] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.787676] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 496.787691] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 496.787698] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 496.787706] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 496.787714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 496.787721] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:37 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xf4d5, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 496.882539] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:04:37 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x12, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="250000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 497.024306] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:04:37 executing program 5 (fault-call:3 fault-nth:23): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xf0ffffff00000000) 20:04:37 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xf4fd, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:37 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x13, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 497.065642] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 497.096717] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:04:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="600000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 497.201576] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 497.214728] FAULT_INJECTION: forcing a failure. [ 497.214728] name failslab, interval 1, probability 0, space 0, times 0 20:04:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xf9a9478400000000) [ 497.301495] CPU: 0 PID: 21113 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 497.309418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.319018] Call Trace: [ 497.321636] dump_stack+0x1fc/0x2ef [ 497.325279] should_fail.cold+0xa/0xf [ 497.329581] ? setup_fault_attr+0x200/0x200 [ 497.334533] ? lock_acquire+0x170/0x3c0 [ 497.339057] __should_failslab+0x115/0x180 [ 497.344101] should_failslab+0x5/0x10 [ 497.348013] kmem_cache_alloc_trace+0x284/0x380 [ 497.352731] mpihelp_mul_karatsuba_case+0x929/0xc00 [ 497.358553] ? mpihelp_divrem+0x5ff/0x13c0 [ 497.362835] ? mpihelp_mul+0x560/0x560 [ 497.366748] mpi_powm+0xec0/0x1a30 [ 497.370506] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 497.375814] ? mpi_alloc+0x43/0x240 [ 497.379545] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 497.384589] ? kmem_cache_alloc_trace+0x323/0x380 [ 497.389638] dh_compute_value+0x34e/0x5c0 [ 497.393803] ? dh_exit_tfm+0x20/0x20 [ 497.397534] ? __lockdep_init_map+0x100/0x5a0 [ 497.402048] ? __lockdep_init_map+0x100/0x5a0 [ 497.406834] __keyctl_dh_compute+0x953/0x13d0 [ 497.411351] ? dh_data_from_key+0x2a0/0x2a0 [ 497.415689] ? proc_fail_nth_write+0x95/0x1d0 [ 497.420209] ? __might_fault+0x11f/0x1d0 [ 497.424673] ? __might_fault+0xef/0x1d0 [ 497.428663] ? __might_fault+0x192/0x1d0 [ 497.432746] keyctl_dh_compute+0xbf/0x120 [ 497.438390] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 497.443179] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 497.448588] __se_sys_keyctl+0x10f/0x3f0 [ 497.452870] do_syscall_64+0xf9/0x620 [ 497.456698] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 497.462105] RIP: 0033:0x466459 [ 497.465316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 497.484748] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 497.492573] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 20:04:37 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x14, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000500000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:38 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x15, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="d93ce0720000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 497.499858] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 497.507404] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 497.514810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.522100] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:38 executing program 5 (fault-call:3 fault-nth:24): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:38 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x16, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="df3ce0720000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:38 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xf7e6, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xffffff7f00000000) 20:04:38 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x18, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 497.677396] FAULT_INJECTION: forcing a failure. [ 497.677396] name failslab, interval 1, probability 0, space 0, times 0 [ 497.715173] CPU: 1 PID: 21157 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 497.723182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.732563] Call Trace: [ 497.735260] dump_stack+0x1fc/0x2ef [ 497.738999] should_fail.cold+0xa/0xf [ 497.742917] ? setup_fault_attr+0x200/0x200 [ 497.747254] ? lock_acquire+0x170/0x3c0 [ 497.751258] __should_failslab+0x115/0x180 [ 497.755498] should_failslab+0x5/0x10 [ 497.759305] __kmalloc+0x2ab/0x3c0 [ 497.762870] ? mpi_alloc_limb_space+0x2f/0x50 [ 497.767403] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 497.772783] mpi_alloc_limb_space+0x2f/0x50 [ 497.777151] mpihelp_mul_karatsuba_case+0x105/0xc00 [ 497.782185] ? setup_fault_attr+0x200/0x200 [ 497.786519] ? lock_acquire+0x170/0x3c0 [ 497.790508] ? mpihelp_mul+0x560/0x560 [ 497.794409] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 497.799447] ? kmem_cache_alloc_trace+0x323/0x380 [ 497.804310] mpihelp_mul_karatsuba_case+0x5be/0xc00 [ 497.809474] ? mpihelp_divrem+0x5ff/0x13c0 [ 497.813730] ? mpihelp_mul+0x560/0x560 [ 497.817639] mpi_powm+0xec0/0x1a30 [ 497.821475] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 497.826679] ? mpi_alloc+0x43/0x240 [ 497.830319] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 497.835346] ? kmem_cache_alloc_trace+0x323/0x380 [ 497.840247] dh_compute_value+0x34e/0x5c0 [ 497.844405] ? dh_exit_tfm+0x20/0x20 [ 497.848136] ? __lockdep_init_map+0x100/0x5a0 [ 497.852638] ? __lockdep_init_map+0x100/0x5a0 [ 497.857145] __keyctl_dh_compute+0x953/0x13d0 [ 497.861658] ? dh_data_from_key+0x2a0/0x2a0 [ 497.865975] ? proc_fail_nth_write+0x95/0x1d0 [ 497.870482] ? __might_fault+0x11f/0x1d0 [ 497.874540] ? __might_fault+0xef/0x1d0 [ 497.878518] ? __might_fault+0x192/0x1d0 [ 497.882578] keyctl_dh_compute+0xbf/0x120 [ 497.886721] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 497.891494] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 497.896864] __se_sys_keyctl+0x10f/0x3f0 [ 497.901177] do_syscall_64+0xf9/0x620 [ 497.904964] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 497.910174] RIP: 0033:0x466459 20:04:38 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x1d, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:38 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xfdf4, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0xfffffffffffff000) 20:04:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1fffffff0000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 497.913366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 497.932273] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 497.939982] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 497.947258] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 497.954531] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 497.961785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.969046] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:38 executing program 5 (fault-call:3 fault-nth:25): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010200000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:38 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x10}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 498.150593] FAULT_INJECTION: forcing a failure. [ 498.150593] name failslab, interval 1, probability 0, space 0, times 0 [ 498.209409] CPU: 0 PID: 21194 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 498.217348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.226709] Call Trace: [ 498.230465] dump_stack+0x1fc/0x2ef [ 498.234110] should_fail.cold+0xa/0xf [ 498.237932] ? setup_fault_attr+0x200/0x200 [ 498.242353] ? lock_acquire+0x170/0x3c0 [ 498.246347] __should_failslab+0x115/0x180 [ 498.250600] should_failslab+0x5/0x10 [ 498.254441] __kmalloc+0x2ab/0x3c0 [ 498.257988] ? mpi_alloc_limb_space+0x2f/0x50 [ 498.262496] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 498.267094] mpi_alloc_limb_space+0x2f/0x50 [ 498.271439] mpi_powm+0xf28/0x1a30 [ 498.275003] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 498.280218] ? mpi_alloc+0x43/0x240 [ 498.283852] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 498.288877] ? kmem_cache_alloc_trace+0x323/0x380 [ 498.293737] dh_compute_value+0x34e/0x5c0 [ 498.297900] ? dh_exit_tfm+0x20/0x20 [ 498.301622] ? __lockdep_init_map+0x100/0x5a0 [ 498.306158] ? __lockdep_init_map+0x100/0x5a0 [ 498.310672] __keyctl_dh_compute+0x953/0x13d0 [ 498.315280] ? dh_data_from_key+0x2a0/0x2a0 [ 498.319623] ? proc_fail_nth_write+0x95/0x1d0 [ 498.324171] ? __might_fault+0x11f/0x1d0 [ 498.328370] ? __might_fault+0xef/0x1d0 [ 498.332839] ? __might_fault+0x192/0x1d0 [ 498.336926] keyctl_dh_compute+0xbf/0x120 [ 498.341090] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 498.345965] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 498.351347] __se_sys_keyctl+0x10f/0x3f0 [ 498.355939] do_syscall_64+0xf9/0x620 [ 498.359759] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 498.364979] RIP: 0033:0x466459 [ 498.368196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 498.388063] RSP: 002b:00007f5172b74188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 498.395803] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 498.403082] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 20:04:39 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:39 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x101e7, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 498.410358] RBP: 00007f5172b741d0 R08: 0000000020000000 R09: 0000000000000000 [ 498.417656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.424932] R13: 00007ffd9b1ea05f R14: 00007f5172b74300 R15: 0000000000022000 20:04:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:39 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x159bc, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010400000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:39 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:39 executing program 5 (fault-call:3 fault-nth:26): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:39 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x24e70, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:39 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x5, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010500000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:39 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x2ee19, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:39 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010600000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:39 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x40000, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:39 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:40 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010700000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:40 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x412c8, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:40 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:40 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}]}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}]}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x34}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x0) r7 = getpid() tkill(r7, 0x1a) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003f00)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x44880) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="408a9f22c1499bddda00ac5fb3908cdc191656fc48b26c123509a44a318fbc7bb287cb9bc6544f3ce3bcf8022467cf2f6b6f7f30ab84f4bce506af357cd3d14b60b0a4836ea208b3831152a381cfe625c55c086a6d224f755fe0456b97f47b5bb731dbd14410ffad99ca970e631aac38f6e2b2e2a0c037b49027f308f3344d92f6a17b77496ff3f3f835311a9bb2c4b3255a687e7abbb9aba853d8ae0efcc591a718e81215367acef0f68e8401"], 0x34}, 0x1, 0x0, 0x0, 0xbd6ef29a2460f824}, 0x0) 20:04:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:40 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x41572, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:40 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x9, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="250000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:40 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xa, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:40 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x42092, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:40 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x2, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="600000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010f00000000000000e82000000009001f0070687931"], 0x34}}, 0x0) 20:04:40 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x43fdf, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:40 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xb, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003f00)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf25030000001400030000000000000000000000ffffac1e01012300070073797374656d5f753a6f626a6563745f723a7661725f6c6f675f743a73300000140006007663616e30000000000000000000070073797374656d5f753a6f626a6563745f723a70616d5f657865635f743a73300008000500ff0895090c754182fba7bbf2531338f9f1ffffff1400060076657468305f766972745f77696669001400030000000000000000000000000000000000050001000100000014000200fc00"/214], 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r3) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000e82000000009001f0070687931"], 0x34}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003f00)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08062167e00df25cb434fdd5da0000", @ANYRES16=r6, @ANYBLOB="0100000000000000000019000000"], 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600)='nl802154\x00', 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001e00000008000300", @ANYRES32=r10, @ANYBLOB="0c00061fe0000000000b000008ffff800400038004002480c827a6de36150373a06fb25777bf9068bff4ba0c005c4ab7feefc1338bb71f1aa54c19a5144d9b20ba43a3cf6f9231a020134692b0e3089950aeb75aa4baeaf3fa13fa4445d16619936befc3e6795e1631d71c000000000000c1059487b5d54ad42909d457d9879e5517f37188d1bedcf55810243615932fa1147224a3ca33b723"], 0x34}}, 0x84) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002dbd7000fbdbdf25070000000c000600020000000200000008000300", @ANYRES32=r10, @ANYBLOB="080005000100000008000100020000000c000600030000000300000008000500ffffffff0a0084007770616e30000000637dffa0b9c1fc307f1de1be29403909c762e76a589c4cd225d0d837c0448e4bc8f26b0565621a6372689a0e24eb597629a13bf5fa1e6e82393ee64ccb04888362ffc6342fbf2932ef06c63f2241294efae91b655d854d8f57463f11556f2fe3edb11d6f4498a1bc2423b6d7186e35235c590d53140369586fd3451437c83edcee8535a9df29d368315d04749bafb5a15755037b7b04f50a26ca558aab3b9a7c4dc1ca9e163702c6f9d3f34b39cc11736e440687f4031201f682e2fb9815cc8db606cb0dee197b4bd1"], 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x800) 20:04:40 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x458dc, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 500.369521] kasan: CONFIG_KASAN_INLINE enabled 20:04:41 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x3, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="014800000000000000e82000000009001f0070687931"], 0x34}}, 0x0) [ 500.397762] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 500.448237] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 500.454529] CPU: 1 PID: 21352 Comm: syz-executor.4 Not tainted 4.19.183-syzkaller #0 [ 500.462428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.471815] RIP: 0010:nl802154_del_llsec_devkey+0x163/0x380 [ 500.477537] Code: 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ce 01 00 00 48 8b 93 20 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <0f> b6 0c 01 48 89 d0 83 e0 07 83 c0 01 38 c8 7c 08 84 c9 0f 85 4f [ 500.496445] RSP: 0018:ffff88804274f5e8 EFLAGS: 00010246 [ 500.501815] RAX: dffffc0000000000 RBX: ffff8880b2dde2c0 RCX: 0000000000000000 [ 500.509125] RDX: 0000000000000000 RSI: ffffffff87c5964d RDI: ffff8880b2dde3e0 [ 500.516405] RBP: 1ffff110084e9ebf R08: 0000000000000000 R09: ffff88804274f920 [ 500.523768] R10: 0000000000000005 R11: 0000000000000000 R12: ffff8882386ad3c0 [ 500.531045] R13: ffff8880ab60d010 R14: ffff8880b2dde2c0 R15: ffffffff89cf67c0 [ 500.538330] FS: 00007fe6adb94700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 500.546561] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.552877] CR2: 00007ffd292a6fe8 CR3: 000000009bab2000 CR4: 00000000001406e0 [ 500.560186] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 500.567462] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 500.574733] Call Trace: [ 500.577334] ? mark_held_locks+0xa6/0xf0 [ 500.581423] ? nl802154_add_llsec_devkey+0x3e0/0x3e0 [ 500.586569] ? nl802154_pre_doit+0xf8/0xcd0 [ 500.590905] ? ___ratelimit+0x319/0x590 [ 500.594885] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 500.600001] ? nla_parse+0x1b2/0x290 [ 500.603732] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 500.609712] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 500.614861] genl_family_rcv_msg+0x642/0xc40 [ 500.619288] ? genl_rcv+0x40/0x40 [ 500.622749] ? genl_rcv_msg+0x12f/0x160 [ 500.626820] ? __mutex_add_waiter+0x160/0x160 [ 500.631416] ? __radix_tree_lookup+0x216/0x370 [ 500.636009] genl_rcv_msg+0xbf/0x160 [ 500.639749] netlink_rcv_skb+0x160/0x440 [ 500.643836] ? genl_family_rcv_msg+0xc40/0xc40 20:04:41 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x4, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 20:04:41 executing program 0: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:41 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x5730b, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 20:04:41 executing program 5: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x5, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 500.648423] ? netlink_ack+0xae0/0xae0 [ 500.652331] ? genl_rcv+0x15/0x40 [ 500.655793] genl_rcv+0x24/0x40 [ 500.659082] netlink_unicast+0x4d5/0x690 [ 500.663153] ? netlink_sendskb+0x110/0x110 [ 500.667403] ? _copy_from_iter_full+0x229/0x7c0 [ 500.672085] ? __phys_addr_symbol+0x2c/0x70 [ 500.676429] ? __check_object_size+0x17b/0x3e0 [ 500.681019] netlink_sendmsg+0x6bb/0xc40 [ 500.685091] ? aa_af_perm+0x230/0x230 [ 500.688898] ? nlmsg_notify+0x1a0/0x1a0 [ 500.692881] ? kernel_recvmsg+0x220/0x220 [ 500.697070] ? nlmsg_notify+0x1a0/0x1a0 [ 500.701059] sock_sendmsg+0xc3/0x120 [ 500.704782] ___sys_sendmsg+0x7bb/0x8e0 [ 500.708764] ? copy_msghdr_from_user+0x440/0x440 [ 500.713536] ? __fget+0x32f/0x510 [ 500.717001] ? lock_downgrade+0x720/0x720 [ 500.721157] ? check_preemption_disabled+0x41/0x280 [ 500.726178] ? check_preemption_disabled+0x41/0x280 [ 500.731207] ? __fget+0x356/0x510 [ 500.734681] ? do_dup2+0x450/0x450 [ 500.738225] ? lock_downgrade+0x720/0x720 [ 500.742385] ? check_preemption_disabled+0x41/0x280 [ 500.747414] ? __fdget+0x1d0/0x230 [ 500.750991] __x64_sys_sendmsg+0x132/0x220 [ 500.755233] ? __sys_sendmsg+0x1b0/0x1b0 [ 500.759324] ? __se_sys_futex+0x298/0x3b0 [ 500.763485] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 500.768849] ? trace_hardirqs_off_caller+0x6e/0x210 [ 500.773872] ? do_syscall_64+0x21/0x620 [ 500.778024] do_syscall_64+0xf9/0x620 [ 500.781835] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 500.787046] RIP: 0033:0x466459 [ 500.790228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 500.809467] RSP: 002b:00007fe6adb94188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.817193] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 500.824465] RDX: 0000000000000084 RSI: 00000000200003c0 RDI: 0000000000000008 [ 500.831738] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 500.839009] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 500.846260] R13: 00007fff19d9a8af R14: 00007fe6adb94300 R15: 0000000000022000 [ 500.853514] Modules linked in: [ 500.862084] ---[ end trace cfc8434499f1f9cb ]--- [ 500.866982] RIP: 0010:nl802154_del_llsec_devkey+0x163/0x380 [ 500.874767] Code: 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ce 01 00 00 48 8b 93 20 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <0f> b6 0c 01 48 89 d0 83 e0 07 83 c0 01 38 c8 7c 08 84 c9 0f 85 4f [ 500.894887] RSP: 0018:ffff88804274f5e8 EFLAGS: 00010246 [ 500.901895] RAX: dffffc0000000000 RBX: ffff8880b2dde2c0 RCX: 0000000000000000 [ 500.911608] RDX: 0000000000000000 RSI: ffffffff87c5964d RDI: ffff8880b2dde3e0 [ 500.919383] RBP: 1ffff110084e9ebf R08: 0000000000000000 R09: ffff88804274f920 [ 500.926672] R10: 0000000000000005 R11: 0000000000000000 R12: ffff8882386ad3c0 [ 500.936027] R13: ffff8880ab60d010 R14: ffff8880b2dde2c0 R15: ffffffff89cf67c0 [ 500.943722] FS: 00007fe6adb94700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 500.953038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.959462] CR2: 00007ff469c26010 CR3: 000000009bab2000 CR4: 00000000001406f0 [ 500.966747] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 500.974808] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 500.982561] Kernel panic - not syncing: Fatal exception [ 500.988570] Kernel Offset: disabled [ 500.992190] Rebooting in 86400 seconds..