24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8, 0x2}}, './file0\x00'}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3f) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f00000004c0)={'erspan0\x00', r4, 0x20, 0x10, 0x0, 0x9, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x67, 0x0, 0x6, 0x2f, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x44, 0xf, 0x3, 0x5, [{@multicast1, 0x1000}, {@empty, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0xfffffffc}, {@remote, 0xfffffffe}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0xb1}, {@empty, 0x6}]}, @cipso={0x86, 0x23, 0x1, [{0x7, 0xe, "a7e55bd3a684c012120fbe77"}, {0x0, 0xf, "720e20e633b9c656f8d8d66748"}]}, @timestamp_prespec={0x44, 0xc, 0x8f, 0x3, 0xb, [{@local, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x93, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x10001}, {@empty, 0x56d8}, {@loopback, 0x2}, {@local, 0xffff0001}]}, @timestamp_addr={0x44, 0x4, 0x2c, 0x1, 0xa}]}}}}}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r5, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="24437c84af61"}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4002004}, 0x20040000) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000004f80)={&(0x7f0000004ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004f40)={&(0x7f0000004f00)={0x34, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x32}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000010) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x840480, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x0, 0x9, 0x8, @mcast2, @mcast2, 0x8, 0x80, 0x101, 0x4}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000004fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005080)={&(0x7f0000005000)=@newchain={0x58, 0x64, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x3, 0xa}, {0xa, 0x8}, {0xfff1, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x40}}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4046885}, 0x80000c4) sendmsg$nl_route(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipmr_delroute={0x58, 0x19, 0x4, 0x70bd27, 0x25dfdbfe, {0x80, 0x0, 0x14, 0x0, 0x0, 0x2, 0xff, 0xa, 0x200}, [@RTA_IIF={0x8}, @RTA_MARK={0x8, 0x10, 0xc3}, @RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_PREFSRC={0x8, 0x7, @broadcast}, @RTA_MULTIPATH={0xc, 0x9, {0xbc, 0x13, 0x20, r8}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4010) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x840) sendmmsg(r0, &(0x7f0000004dc0)=[{{&(0x7f0000002080)=@l2={0x1f, 0x5, @any, 0x4}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002100)="b4e6cb295012e0e7a7eaa30e96b05467d1b29f24ec54d5e72a098dd01dd67b3816786303c7b89a55b54630817d74b98ac5125152934ca6782ae00b06f70d29e865d23ec6a69ebf7acd0269f8a0d6b59533cc4af462bd", 0x56}, {&(0x7f0000002180)="95797b84844a", 0x6}], 0x2, &(0x7f0000002200)=[{0x1010, 0x1, 0x3, "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"}, {0x40, 0x3a, 0x1000, "7e3b2e408079e3c717dfe31a4e8065774fbbe923206518c1d4a912e5836cfdbb244652fe4229267b5a73f9593833"}, {0x50, 0x107, 0x0, "69b501da2b7afa1854f7febbd00888b5384c9723f16f9c8b3faff285d074a13d21648e80ba1eb2af6d765c10b0fa216b6be3bb70366b3cbee74926e1874cac2a"}, {0x58, 0x119, 0xc0000000, "c33fc051abb6dc3a05178c4e80b8a3756f3bb44febdae364a53e0c0f77484be25b581907a24671aaa94719a9ac8060c3a36514f7b51534c0b691d532f1b558a7d49fda68b4"}, {0x40, 0x10e, 0x8, "0abca0e846118f4489be41c75829b10e3649891f12e37a6d5789053b99af66faa99051e1c0226e26eddc31818002"}, {0xb8, 0x10d, 0x9, "92cf55e5a32488ae290506a39686dacecf89857e40ef459c1e77cc9a93071f6efbaea52caa1bbc791988362a215b098a469f4456904504cfda44ec5b9bf95b22995f330b1bf66035280007ec3c00ec93471c659debfdef22765457a42491e4ea2c13fdb1fdd0b852a0eeaf7ea0f286fa94888dfdb1337a7c9e31a32674bc06e95400aff858bbc90f11f1ac0b6a0655ab17539fc90d7c61a5719db800c85e62005edbd7"}], 0x11f0}}, {{&(0x7f0000003400)=@in={0x2, 0x4e22, @loopback}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000003480)="02712cde2d116ba7cf6772eeb9e5434b497b81c76e5a018ed60a2d549c0bf86688bdc10a589645ebf4cc56e8a99bc47e5cf527fb1b2e8b02f1b3dbf38c6a6071a1db2e6acda4eafbc462d344e69dbd16d79637b5d18bb50c1bb1268d3c357a04a8b4b58f74270dacdd719f036ad4217ad90732680a07750e08b0862276ab8edc6e65bcb0e527d0474657c6dccb4ae7e31ddd7b49fd59801a9b1c733eeab13f17256977c5ac77bcf10f5c6505551cc578836f6aecde9b9aa9a267bb0a658687f60a350349b5e4894086131ed1f591464b3508ca5394de9b59274fe880e46c54a7f7148bd198c729", 0xe7}, {&(0x7f0000003580)="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", 0x1000}, {&(0x7f0000004580)="71bee6ab20cfc8395e7b2d19ed62420e510b42afaf6d5afc997238bb2bb4a0a4ed66b994f9c9e6859e5928579d9e50961fbcb49ee4ac67247fbd7a0b5d3c925ec4c209df9359c21382107565f79e3345bec06f7de44faf19b8d0250a8bb31073062296a3574eb8ff1347d19b4a35f73ceb93075c505ce03f3c248d1671f6190354d3f640e4410048100b0da057074ecfe1ab86a63de4f109f5328eefdcbc4f859e17c8ee8239eebbf5d28860f88a2b5de74b", 0xb2}, {&(0x7f0000004640)="efd56e3938b94f1b78f7c2a606607171b0562ba1e8c5381bab2ca429dc7fbd0b56ecf137f753f85e257b0cfabb1d9ab10d88b636f77270d1830db2b96e422760eb7e05b9a144e76a3bd8160508031de4ba791c1141aaf08e853d1b27fe3af36d9c4acb7b64c7f35cd57eebda5e529e976f9f7eb6555dd3dce20f4aea7d3981febf83c6d349f29d9c1cf27b1c809f84e9ae409e396cbdc6140aef582d16d0e8380fbf2c706330745f27f462552f3a138ab3700a9fa3874e65", 0xb8}, {&(0x7f0000004700)="45fe70d77b6dc0873df0e3970e67f52498e422f74d871191626e954810bb99119ad8c1d1bf490414cbec67ee211ee9fa2befe6e108c0f41dcfb30f833bc43f9cf41929691ea1715d855d71e09a46965baff9480f6474fd396a9b7d58d04d442db1c3e15dc2729b663f908146cb6e0c642be852cc46b50ff4817e1380d3dc32b00052e977fa2254fdf31a2df4087183d574dffca81d69c2197a78f516c3ba6363e584a17030d3704b42601d3e7f8b08", 0xaf}, {&(0x7f00000047c0)="320487cac9a8b6d180fd09b9eee1d31ef98ce6f002bb34c2c7c48eba609187fce480c26482571067fce5aa8ef8a76f6a0984c4366f707209c9a20223bd601713c2f1b701491da89d7d1ed6a136466d98dfe981e5af0a7dd85fb30306109416ff9269a162f25fe1664781355ffd14e14c8206a4b4ac904fdd79f285a21a5ed3a4b7542b815c872441525e8d5463a7bb9a6dcb31b8da", 0x95}, {&(0x7f0000004880)="be9a374b3846bf8bbd81b7d6a184a456f9bb16928282eeb655986c44b43a5df8b2ef4ee9509800a803c59fc3bbac724d31d94d193dee0fb18f90b037bf05260f6def3d2262d0c7c9416cb1e9dd4ad07b7a267f33cf6b20f44bb497f3d8fc5133c7118fbb7d0a6945f5132186ff1134079939e9ab2f318bde523d5b74bc009f09c9df2284c6e89df0b8ab9a6fa738b2a63399489c6c1a00ca24446c416a3bf8554e672183a4fdb07387ee3f3d5380b11cfa5728403ee45f51062f8d02cdc4826f91d9f3558d10a4c03677592063665fdaab3b961250fb114f8191282528c6a9d403e49e28da1a9580d16bb4e453e5fc0ca38dfd75", 0xf4}, {&(0x7f0000004980)="a48cf064eaaecdea55b5b18681b7b9d7f5aef77fa1c3794f74432406defb7e442f6239ee785ede7588ee08230cb71a6711aea3207dd616a8f241c3abe8faea70c27ac20fa4d78799d93c52f7371469ddf6939851a4548eb83693a8b47dbf56eaf1325f0d224762a7415b156c168f7e646803b029", 0x74}, {&(0x7f0000004a00)="97cf8c975ed3e82fcd4ba3b886bded3ea2b64e65a7f50f5b1addaa98f36a683d7eb38a9cbc5534c63b8768b3cdef6c9a52e09b3c0acc71e1fafc7241ae2f5ae4b4ed", 0x42}], 0x9}}, {{&(0x7f0000004b40)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004bc0)="8dfa56aa8395036d9a93e137612f9e4d1c685bdb9829279f3af6f6a4d8f7f6d043f6ab7c392da6baad7296d04a849e0595a22454c5efc6afa6b1bbd6125b369544f1ad08566b68738b53bcc72551b6de2fdc2fac4051", 0x56}], 0x1}}, {{&(0x7f0000004c80)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004d00)="bc09246720209867e9175258cc0e25f321e5c665c546ce8e2817a5446c2bfcc8ec38c9a75aded0044ac2c4502b50418377d0cbf3ecc37ee2a873ea35aea7ebb9a1fd72a8", 0x44}], 0x1}}], 0x4, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002040)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002000)={&(0x7f0000000640)={0x1990, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a2}], @NL80211_ATTR_CSA_IES={0x13a0, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x94]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x52, 0x1f, 0x3f]}, @beacon_params=[@NL80211_ATTR_IE={0x26, 0x2a, [@supported_rates, @erp={0x2a, 0x1}, @chsw_timing={0x68, 0x4, {0x800, 0x746}}, @rann={0x7e, 0x15, {{0x0, 0x1e}, 0x2d, 0x4, @device_b, 0x400, 0xffffffff, 0x8000}}]}], @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x2a7, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_b, @broadcast, @initial, {0xf}}, @ver_80211n={0x0, 0x662, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x8, @random=0x5, 0x2010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{0xb, 0x1}, {0x6c, 0x1}, {0x6c, 0x1}, {0x1}, {0xb, 0x1}, {0x4}, {0x48}]}, @val={0x3, 0x1, 0x7c}, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x40}}, @val={0x76, 0x6, {0x40, 0x26, 0x3d, 0x5}}, [{0xdd, 0xec, "635b0c2b4bea361a91b0e37fee8dac045de6081efa3fd110227612a5d11e52dc18fd3ebc3ff672b740a7a5528c4fb0bae5f0e42b0ca4ddb633e50ab77da8bde668199874c8f7e9d17143c198fae91c83e72f6734e029395c9f47c409203216ab163f65cc0bbeec9099f47ab7065a1cf69fbf682ecb4ade92bc960386854d5173c104c737775888fb8c5d96f924194a30f982d92ebb9dc4e375eb2aaca6a7638effa8d91eba89c9e28b3e3c83dcdb943c5faac7cafc5769e7f0fb2337bc4c364eb7967016173f06ebd69c8507584a042ca9c961cdf5c8f91b41aa4cde10631dd9ff6dd6239bde46d7b5bd14f5"}, {0xdd, 0x5d, "a731f34cb07340440f7a715ffaa4bacbf8642566dd7eefd5df5b8ee7fefda074adc52b06eb2bb1f5cad75748383c00a12cf4103629868f94035eb8a044bc5721a137d7752b98333cfc1959b24012653922529bf0b679cf6f0b7fb2e984"}, {0xdd, 0x46, "d5b3cc7f61d107df72b80eca1e004cb5b99f7356894970ba649bb41c8951d9777eea1e4695cd628735fb7f41276b37c909eb0e0757a19db996ea86f1b82d6dfefa505fd87d8b"}, {0xdd, 0xb7, "9a19c7b44e858f5e713b09686995f7d1333a32db8f9a3c82ec9c248fd8c2b8ac096afde1eb06a3f783e23adc9791c59c34ff3255e0be1b0d46af68645468b2d5149bb87284b693834f9e08a7669bc04b5be8ad4bac8ee5113c0783647c70984374fc537c97f00913e8b5d90dc3e19ce437c5c9d17ca9d91adbbe8603b30016eb6b54396b41205af927a9da590d0921e9f652c4d8072512991b33f8200cdf3556aade5a3995c1ea41bc7370e7830ad15d41fcdb9d124add"}]}}, @NL80211_ATTR_PROBE_RESP={0x32c, 0x91, "f8c741e9ddf5d93da30130c0f8ca4b072270239c8db9acad51139fa79250c81b81dddbae59eda7a3b5907b29da868c401ac8dda1d1ce761cf1affad03a14fc7e53ed7cf53e6e61ea536713e9d3a17575a2a6fe5cb1c29e6a09768dd870ea91a2f19719f743520da64553c25268304dc45352a18422033c07fc42b7eb100526752482323785b8a33232dd120ee6dfbddc643e32ab94dd8ccee68d0628cdc4442a7f3637859453f30f1de4ba15263dee46532382b07f30572b2c68beaf80d5642dc98ddf5bfc861eb3f791b14bd59d43b9ebed88f05b92b5464c04c38876d022072463934331d53b25fe1206f25793ff52b6ea13bed4fe3201681c340824e327c81a4bcea0f67f58dd43413c2c1894f84462535528e7da954dea682c36ac247c41d1f9c76bd4caba4dd94623d6d119e05c1fe0967bf21644c845ed67f05573b9c83c34228fe1e433b03e444aea86b3e36c8ad39f657add66ffbf0734924aa4a954e75bb5c97bb10f5423a8eae362b95a4c078d4b3580952c8524307108e73692d4fa4fd1e2ab8d3a0611e851be43b1a3df0c0f0824f0b225a12c833ceb8c71b1f297ff57fa5fe2631b2c57c9109136593bfcb271696024ee30920981dea4fe00a7f35c8e7f926b36fa23af4af88b17672acafd8d12b1dd4539c13e401ab02a06f58f00884063df4849ca9ca3cc2fdd6be252804b418fdd6321363a198957d40497962be7673b6bee3b1450d20e16e7c5c4ac52119872732831f81e00c22fcb940e30cea88f9429fbf04712120790ba2d9e2ac84b8c44dcefcce6f47a1bf6def816b3c9bef1b588d72f090161d8d8d97e8a257d30fd2cf42f11c6037f60f3f537dc33ccbc7d5b531b0900efc82c5d95abccc50bf84283275e6067c3507d342ad5dc2ae23ba5222738e2159f594b8e7376ad9dd7f0a3b022aa2cb50bb88bd33f30f6cd88044792519d7909406c108d02e75398965c08bcfe4d6c92ba3039fa23d94ad215aab5bc6dca3383545be90ef1c253f994e1b183cf73333dda9b5bfeb28d8bacfd3412ca540f7716d34d27fa6d066b33c2ab1d1ef0ad2ed6d0c570907408eb198905e09582ed8006f14f40c7461a57ba18dc679792971ba4d30052e37a158e528cae0d1e902620"}, @NL80211_ATTR_PROBE_RESP={0x6f1, 0x91, "80fcb9be03214a6f47f50b9a89d7b2c15201be0c7d628001eddfede7d1aff631ae01c78892efe789404b3e0a85bcffa199d6f41e277c84d27252023097f4eb3a9a3089f4a458f1a105722d267451dad67dc58d76cd0d3d7538a68b9a22961587f4bcc05e2ebb67f07dd07d90aebf483cb3e1bf67d287e4d3e870fff63e3fb7acbbca6dee7e24f8505d813dd3b6b53757ceaf4d60d7bacb5271157c9e93f2556fe1d71e4a2a4ae8f2ef63f45d4320a1c6bca3cb778d3fbed5851b8e99de0da292999ab52124c5eff63cfa53bfd998ab609e6b8bbc0b00810bda869fe056a7e9b0049d8af3650483b2808a87d0f43ec8ed0db349986fd2ce8dbacbefcb8c6a4ba5e08cdf9e5feb63cae75f03c41b006668138085fa22e3699339e499d7ca67439514d24cff9b5ac5a13828f9773ea5b38dc7dae82ec3fede239e901d4d206d81c44eebe78d919aa5b6cb9153c5606389fa6b68d81889cd53e2e8178535b72e7e780146111abaaafc0a5c2c21a690008e2c3bbd7bb114b79296fa7e315568873dd2623112bc94c7b6f59aecef5fea347693df8787ea4ad13f02514d496a304b61031cd9a790e3ff192cba3566fad3bec73199c313c36d5282cb088fbc3febb7974e6394936e28afe9ea8a90d4196c1e3e995f229ffcb4766269ff7c66634cdb7ffff835c794790a4eee9e95b7d9db7980348319473fafd3cfb635d4e671dee6001ce7a295fa1b3e4502ca95664aca3ef7d751ddc1f269b3fbdbe0bbac2abe8907d29cd52ca2181291986a0aa909673f6f2eaf9ed72d941e4845a82a78393f84bf0a48dfb64fc65695fac7719170319b831017da9af5ac22c0c67975fc2925d3e809f72427dc39d33d9ad8f4b20f0c69f0d07abf528e7c3aabeae94913f25687313d2d02460da1fc40d2e13888b7116829d6a9564f3939199929489d1c8754d66e10c4687c2b423b7345757f73bebb0b22dfc8a950749d207451d345cf8890e945bcee5a22427ed442009b851f6bff34f34a3023fb66f50c83d15b8a87135824caf963cc101e21acc7c0ea3d501c1983324eae46969f4f445dc0031b334acc30e9610ca163728998c5be192a31299280acbdbfb219223ad913ca1e592e45586cd0917206fee6b759aa37d5337a85c269e9a63d279237a39a1e6c1f0aebffb151ef73cc39913d3117d0c8d02ffa6c770772cdbe9178252295e34fc5b63d1ddb7c40639cf679f9e00feca8257c3a172a8c3bfb8a7c1e4ac0a366777e71cb7d7650ff04a3c7beede941dce412e3c152970914f91715300a0b801fdf63ff86a924922d77c290e4e1d4decf64bb9c627ceaddd0da799c8105f9951e5c5dfab42bec39842325dac30b1e9a2bd07ef4ec60881f15817a690c36f9116a3d7ecdda88f23c06557b43df8f2dac021dbe4aea7247cfb8aa80eab65bf061af180d34a780687b864f2856d7799e687117f569150608936183252064d0c40c63cd4dd66a1de129ce1051522041d223c49e5bf2739b6496052fb31103b25c1ac2aab43b97c6614269e2db05bc0b41f288bc01d6e3c6793185728d1379401000ce069db6a1d8537823596f538c93646897aee52c00085bd35391405de9e2addbeacd63d1a6f9a0315ed7d1b61f375d513cd182287b33bce67faea27bf4530b3287840f8b1c00d657145cd9ce65f760a17be650f570b744a7a344525c86900395a548dab7c6874fd3e7c7fea079bad83730f6500f0ac194dc0afee278694046ca85141a92e642e7ba5c4283c077ae323ae44c750784ebf11b13b0accb7c18a8c7d64bbadad23e48b6e07c13fc15f99663a6249881f2638c8a5a4ff979cb759a13ba445cc5f2a5f04e5050dd4862e3a5070cff536d416951d474ff334cb9164e55f51f29e306cbbf2e9069fcc330245f23daade70458b14a9491172971a50b509fb28bd83421aff662939113f18503d9d6bfe830cee033590035e20c8976c66d7832b507137259742c64c5983f43a03b5713c001dd57696389d79cff63eec2d17bbd5bdb6d282c84ab594be833b8266bdcfa57b409f894084825d2ee51f4878c44f1419c8d124b33840b3f3bcc56669fef3dcac515cff0138bce72431deb395e3fafaf681c8c801294e0aec6a165538122af98f8dce47e4cfcb47458b3ca832e5119474cfbb1a97e1e93d64090ac51f7782c91e81d57bd1c1890591994010f8eb5bf031f4dacde9d10ad7f29bc84ea10c5e4383848257bc405cfcab9ea7e5cf410448bcd2df634a6582aef4213dbe7c35173b36a13554d9b77d91053b31f20850f3ce8e18f85c02cd0e3ba6e00eb4374c1b6a7f5ed3b2a4358e6b9b178c14a103ca40cbf9aecc15d271086352ccb48ea31178ea87aaed6f07a5c17d69cf2a0bbfe02c8fc99a4b9accc6bb3a2bc6f30b55938be32be34a15e0a1de65e6274c82739e3970e56e24b0c2ba294267be458ef23f3d66d9d966e1e86164c9d24af03428abca19c6b0e6f217262a0286354488b9a1031d7e3504967"}, @NL80211_ATTR_IE_PROBE_RESP={0x227, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @rann={0x7e, 0x15, {{0x1, 0x69}, 0x9, 0x70, @broadcast, 0x2, 0x7, 0x4}}, @perr={0x84, 0x22, {0x9, 0x2, [@ext={{}, @broadcast, 0x7, @device_b, 0x2f}, @not_ext={{}, @device_b, 0x2d71, "", 0x1f}]}}, @ht={0x2d, 0x1a, {0x80, 0x0, 0x1, 0x0, {0x100, 0x1c1f, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2}, 0x8, 0x24b}}, @tim={0x5, 0xf5, {0x7, 0x50, 0xdc, "abeacd544aef4d3ee4942547c8bfcf67e510f3536d2a04f29c31d7e4654d9ee6221466ee8a3b4b410dae1e9c4252d022d9fbe9e0f60a9b824baf8ce0c5eb5b564bbd7ef4d571f9f80f6204172626c448f6ec9fff10d5f4c0dc2bb7e1e0604e80615cc81ba9e403fa3347de3745377015ead4f74f07e67a5c619eb18a2dc09f2367861b189eb8325f7524ace5ccad1af56e132c9fab21d59c56d5325de67eed642dd2dbaf9cd709ea95a00655b4c603af20a9b644fb9705e3914968671023fcda2b854ae5fa6eb694d40d810e783b6b432f532216b29022f9064a99b823864b3b673d5b92625731495d62ae80704f7796a709"}}, @tim={0x5, 0xd0, {0x5, 0x5f, 0xff, "e5de90380bfa274661ff7e8d79531577bf30f95295108b3c80860fdbfe2f7eb083eaab4ea9992e758a42f3e1af52b0e7635cc843dbe9e52c84e8b1817598b6e685f79a224b7e8081e95d1e475623ad813e64acb11e7347db7ffc0728aad3a16edf12a73a8d2ba9079a32176fb2aa67b610a58f59c3c38f355b63eb58718dbe266c91a9fec3608d704b5bc403f12a87bf2b94ff9e87012d57482b2646f77ce912b2181f7f8f27cf6b88942350e7b86a72376277d85eb281d8703b195d6569394cb968c9c4108816f6c0bde17433"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xef, 0x80, [@tim={0x5, 0xe9, {0x2, 0xe1, 0x0, "dd9683d81b263b325ce69f9879799ce89346310728d4513a5b3d5785649f987c288333849f093e20f8a666005dd9cb9da1b7b0ab7295d4e8616c6461fee00c2d8b0b97e26b86997bc3915bf7432caead6204018192c7396de1b39047b98aa09b311e03820bd528242fbc05bb66695075290cd144179447eb9ca112fabf22f9d1f8e6331742650dfb7b18fda5617b437f1ff37948eebc467e5e3ce5b3f71e53aef605166057355ed43867985aa9b84035df884be8c6971943f7c79c80b83af704b5ad27f19f3e17c6460751ddd28e44d66170871eebe9f0eb6c919d6d6d6aa95610a4e9f2ed5b"}}]}, @NL80211_ATTR_BEACON_HEAD={0x369, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x65}, @broadcast, @device_a, @initial, {0x9, 0x6}}, @ver_80211n={0x0, 0x1f, 0x0, 0x0, 0x0, 0x2}}, 0x4, @default, 0x2406, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0x7f, 0x4}}, @void, @val={0x5, 0x70, {0x2, 0x87, 0x8, "21c13eb118d22ab8748ee28323b39d51400b2af9c881900dc9ed194e69048ae19df5d10f24490fc0612e98db319a4809b6d46def4e1e5143da8cb460093546e4de7067a548dae564eb1577fd88a7eea767c299e77631f07ac9d2020b7821500359a396d447ad12fdc46c199fd9"}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x20, 0x80, 0x19}}, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0x9, 0x6, 0x0, 0x20}, 0x6, 0x10000, 0x6}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x5}}, @void, [{0xdd, 0xc5, "1216b337e5009a79658e3a37cd049d86f10cad3eba2cf11acffccbc44e7ea96256ded3af5b934d9b5e3d70712de69172aab488a1b9039885a521ca8ed07a127a9f07fcdf36e3fcab14ca0dfca2e2da978dd7ac34fae8c57c5366dd9781b7e07c873fcb66acbb722f00317ab4aeece838c63d748588f95328c5742c2b2323fcc395490d4aee3beffad4630647a1f5294ea90d928a006f076b4b1a86f64d05726cb9d95fb550f81d3fb10dd97fe25350c16c4da9cdae0936d3b04a90303fcc942150686d6f8a"}, {0xdd, 0xa2, "9a8f565dc2c6907a848cc3bfa160ca51dbc6f50370e7189a5741712080c768b09490c5ca71f384709206b8afa1da5623acec8f075bc47c386fc12daab3415e063cea66b2107c972b2a6d1bddddccb02b5c8462fd2cdb2a861331ae3c9be8ff4693e7369c222c9606895f59c7a8a59b720bf2db01ef19122f5e44ac2afd2954ebb8e9b7ec500e2c2a4dcac0716e18661f5fb21c4e08cddca3181ee4762113362f80de"}, {0xdd, 0x6d, "53c704c596ff2d954496a4ca493a31891bdb365617814e123c5a5d5d0c580a9c8ac9459d7baef85f663877a2c30a6d093bdd9f7f9a885b5c027a7f8d9c1edf9ae3daba1accd724226a97f68407e68cff81bfe47db1a0c3988ae6e568c129bc6666e025f4a352f3b15d98b566ca"}, {0xdd, 0xa9, "bf92cb7ecab6d155848df9eee1278ee43f32848f623b5999d586882e04616bade3ac28ff583973a82bd5868c992ecfcad455fabe247b2e30d2d738f36f2d4a1a38d31960e3511fe41a3638d866dd671d0989e9e8190e375d3e47d9c3e051abc9be6133c9500050e52422283684c49a8b126c3f2a22aa406e114a50af8103356f7eb23e410002a6710892ccae99eae952a554cdb0c65c9fa2132e052b4ba396f936b51de399465bc0e2"}]}}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x80, 0xbe8, 0x1ff, 0x20, 0x0, 0x800, 0xff]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x86}, @NL80211_ATTR_CSA_IES={0x5b0, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x1000]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x1, 0x4]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x16, 0xba, [0x7ff, 0x4eb9, 0xfff9, 0x1, 0x20, 0x81, 0xab, 0x8000, 0x9]}, @beacon_params=[@NL80211_ATTR_IE={0xf2, 0x2a, [@dsss={0x3, 0x1, 0x88}, @ibss={0x6, 0x2, 0x3ff}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_chsw={0x76, 0x6, {0x99, 0x1, 0x3d, 0x1}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x3, @device_b, 0x1, @broadcast, 0x671, 0x200, @device_a, 0x4}}, @mesh_chsw={0x76, 0x6, {0x0, 0x6, 0xa, 0x9}}, @channel_switch={0x25, 0x3, {0x0, 0x3e, 0x9}}, @fast_bss_trans={0x37, 0xa1, {0x6, 0x5, "87ea885ca3ef967a52ffac2de5c0f25e", "fa13c7c7763864e1623145b0541e0f9da340496517490fb7b29f89d7a9a7c8f1", "a66718fb2f22da1b48d9498ed6626db2b8bbdc7d75315472596e11c6b8351339", [{0x3, 0x10, "e222ca166cbf7263c46646fad82fd47b"}, {0x2, 0x7, "4f4dafa3773021"}, {0x1, 0x1b, "5b4d8d81bb334367b3d465854e1ee0cbf558a64b762e4c73f5a8cd"}, {0x4, 0x3, "007d86"}, {0x1, 0x10, "0ac0fd7cc2faa85a0c552e78b4204f66"}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x5b, 0xf, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x40}}, @preq={0x82, 0x4c, @ext={{0x1, 0x1}, 0x1f, 0x20, 0xf57, @broadcast, 0x80, @device_a, 0x6, 0x800, 0x4, [{{}, @broadcast, 0xeebff91}, {{0x0, 0x0, 0x1}, @broadcast, 0x6}, {{0x0, 0x0, 0x1}, @broadcast, 0x20}, {{}, @device_b, 0x3}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x209, 0x7f, [@ext_channel_switch={0x3c, 0x4, {0x0, 0xfb, 0x8e0ecfcf6223861f, 0x40}}, @random_vendor={0xdd, 0xc5, "8a7abde425640fb4564b64ecd6735b7288cc8692f032b031b5ea5a653593836b1fa1cccd55c45872fbfedbc72e62f0fc7165ba59d9be7cc6eac330916ebc9e952627abe6a74d00ac00b317fd888f1fb8815af19852fccdb5cf08cb6ccbdbd35a45e036335c31ff1c8913c69c773015269f047d603aa0010ece9936fa96b3de83e85c866cdf3315876e34e6f89e1f2c552fff9253d7d9474c75a92ba5a2f80f433b8ba200fe4a3c12d6102f45016e14fe182527b5baaab74a588705cc1d5d937b2b273635f0"}, @supported_rates={0x1, 0x4, [{0x1}, {0x48}, {0x16, 0x1}, {0x12, 0x1}]}, @mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x1f, 0x7f, 0x10, 0x7}}, @mic={0x8c, 0x10, {0x523, "3713fc61bae7", @short="2f034232cdd54d33"}}, @mesh_chsw={0x76, 0x6, {0x5, 0x5, 0x36, 0x8000}}, @fast_bss_trans={0x37, 0x52, {0x9b, 0x0, "80340c0948a6f673f82290031b75458b", "a7f777e164707e38edb9432e5adce853c269d211cbe952d804b54aeb2d9cbd81", "1d8799f4f20fcefa11d28eb254215d35aeb8092c131652637a28aaece699ab32"}}, @random_vendor={0xdd, 0xb2, "3f78b38b03002fa0043be11d391a7a70d8f233d29fec69cca5fcc62b817ab5ece58d284f309f02fb251953bfb6b219a39640aba58185b4ac606cc6ce9e055b945d28d421920102159f003c947df987e940cc57bd6b19abc0f4fb742e2a2e11bc2e5269596309e24a68a26801075a9960fe037cf3cd04bf102aae2dc3ad1109296179720cadf672c75352363e8330436bdef1e46b2f00d382f4839e2bc1db10a2bda4d3e7bb5641f008c6f5c37074375cb0d1"}]}, @NL80211_ATTR_BEACON_TAIL={0x91, 0xf, [@tim={0x5, 0x83, {0x7, 0x51, 0x9, "64b8d8ccf0c0b93fd61f8c8c1908adc338475f6dbdf8a5811841f1f42f7c497d714ce98af163758954ea910a793fe48dc61c75a7c23a3dfd492175ab98e74cc32fc30695e3e79a694cdd00cde56f0c064de915eed5b5b828672fd1ec8656b9c362a3b190db8cea0b888ad0a011cabf504e556a919c8bf3c71885b59a3c1b9553"}}, @cf={0x4, 0x6, {0x5, 0x81, 0x4, 0x9}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x194, 0x80, [@fast_bss_trans={0x37, 0xc4, {0x2d, 0x4, "10d5547a1e130dc12da2f0a8351e65ee", "3ab2e39a6e845a968ef5c96dc38a92686ed64478353429dee0d8e7d87ce7acd3", "cabef2e42e4b813ba760ab57bb5bedf9d9bfc9154812ac771f9d034fe1b64cc3", [{0x2, 0xf, "d5175391d4bb25d7958335618b67fb"}, {0x4, 0x28, "11c6418267539c3754a6ef1d891ae603fc45ee787b957145f3fb7d3536d51f9e14c2e5db00bf3e05"}, {0x2, 0xc, "2d27a0413e829d2bc9c429c6"}, {0x3, 0x27, "f28a00a45503ec52382700d64afc97a49faa86fbde173d25c16eff6d0958827da7eeef6df0c271"}]}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x28}}, @chsw_timing={0x68, 0x4, {0xb2, 0x9}}, @supported_rates={0x1, 0x2, [{0x48}, {0x12, 0x1}]}, @gcr_ga={0xbd, 0x6, @broadcast}, @fast_bss_trans={0x37, 0x66, {0x3, 0x2, "8ffec014bef7dc23286c7d4919061080", "d4845083c3dfc0b02bf0ed1979c34f89603eca2dec2be7ba73e4bcaa67e98baa", "366be394656c4343633ff5f879d7d8e05bd60bc23bb2e9efcccdf5c4ec52c4ae", [{0x3, 0x8, "28b60aed79bd0f17"}, {0x2, 0x8, "e950b5e05d3c127a"}]}}, @preq={0x82, 0x25, @not_ext={{0x0, 0x1, 0x1}, 0x3f, 0x40, 0x7, @broadcast, 0x4, "", 0x2, 0xfdc3, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0x10000}]}}, @mic={0x8c, 0x18, {0x1f0, "c21211a8862e", @long="a6974505c879d495771c4f4f72d1d462"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xf5, 0xad, 0x9}}]}]]}]}, 0x1990}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004040) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="0654faebc6a79e74e7610407b7e606a7", @ANYRES16=r1, @ANYBLOB="010000000000000000001700000004000680"], 0x18}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$nl_route(r10, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2004a002}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@can_newroute={0x2c, 0x18, 0x4, 0x70bd2c, 0x25dfdbfc, {0x1d, 0x1, 0x3}, [@CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "90cbc822711a25f2"}}}]}, 0x2c}}, 0x8008) 19:22:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2513.468416][T24930] device 2581 entered promiscuous mode 19:22:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x18}}, 0x40000) 19:22:24 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="01000004f706800000000000400000000000"], 0x18}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) 19:22:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x9a02) [ 2513.733620][T24950] device 2582 entered promiscuous mode [ 2513.748720][T24949] device 1168 entered promiscuous mode 19:22:25 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d163", 0x2e}], 0x1}, 0x0) 19:22:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x480080, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc89373f0ac50dff1}, 0x4000) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000280), &(0x7f00000002c0)=0xc) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8ffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 19:22:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe1b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r7, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004081) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, 0x0, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000580), r2) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x48000) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x17c, r9, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_REF={0x43}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "5bd336051601ac444cb1e9445e1dcea8c02f20ece1aa10471cb529"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x79d7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xeee4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ID={0x11, 0x3, "76cce82503475823049f10e2b4"}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) 19:22:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x9e01) 19:22:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 19:22:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x8000, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x8c0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x2d0, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff69}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e05e4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x683}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99b}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x37cfe6ea}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe2}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80000001, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @loopback, 0x2b}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4e33a51e, @ipv4={'\x00', '\xff\xff', @empty}, 0x401}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 19:22:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x8}, 0x14}}, 0x0) 19:22:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="6cbc23410010000008"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000005380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000082}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x551c, 0xe}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x4090) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x220000, 0x8) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x350) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=@deltfilter={0x4fb0, 0x2d, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x219c, 0x2, [@TCA_BASIC_POLICE={0x90, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x99f6, 0x100, 0x5, {0x7f, 0x2, 0x40, 0x3, 0x41, 0x7e000}, {0x4, 0x1, 0x2, 0x8, 0x8001, 0x1}, 0x2, 0x6, 0x1f}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x7ff, 0x4, {0x1, 0x1, 0x200, 0x5, 0x1, 0x5}, {0x8, 0x2, 0x6, 0xfc6, 0xff, 0x7}, 0xfffffeff, 0x2, 0x5}}]}, @TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x20, 0x2, 0x6, 0x101, 0x1, {0x9, 0x0, 0xfffa, 0x0, 0x80, 0x8001}, {0x2, 0x1, 0x3, 0x8001, 0x5d8, 0xbf}, 0x4, 0x6, 0x6}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x11, 0x10}}, @TCA_BASIC_EMATCHES={0x448, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x178, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x800, 0x1, 0x800}, {0x10001, 0x9, 0x7fff, 0x4, 0x1, 0x0, 0x2}}}, @TCF_EM_IPT={0x78, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x800}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xaf}, @TCA_EM_IPT_MATCH_DATA={0x30, 0x5, "351eb439a308e0778e8182b1cf0b88dada707c8342a5bf100c7071eabe80068c730e4eb72fff0850a65e626b"}]}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x1000, 0x9, 0xfffd}, [@TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_CONTAINER={0x7c, 0x1, 0x0, 0x0, {{0x5c1, 0x0, 0x800}, "60a4a11962947b63b75350d71a09bf8c61fc211005d340f990784e507ad9682af640e474a97b88d8b5b63c104560f16cb91b765354f13161a28d53bad4b87d0b975cf2e8033f38b62b7cfb6a6900b2380233d4ecdc6b8cd216a728a0a4ef28beaa1da2ee6daf1768caca98c4c38ea6"}}, @TCF_EM_CONTAINER={0x20, 0x3, 0x0, 0x0, {{0x4, 0x0, 0x9}, "214554eaa62c541d59571a71ede6bd1deeef317f"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x100}, {0xfffffffe, 0x7, 0xb11, 0x2, 0x1, 0x2, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x2, 0xfffd}, {0x2, 0xa, 0x1, "08c23dd247179823b000"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x50, 0x3, 0x0, 0x0, {{0x5, 0x9, 0xea89}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3f}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x258, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xf0, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x23}, "aa607afc65fe301f6c6b448ef0b96fb272e1ed580a0c786f8e7bf4617a728ef8b5deb78442877da87c1e25096fa07cf6209ce38807e4518cbed37baea27da6b629d26bad5efd6252591be53b1b4676c038e9042213783cbe09ffba93fa592c6870504d283d17afd39ff4d55ffef71690c4feac2cc12159e29cad4fca5a3ee3c00d19195da079e17a7b769ee8ed283e8958e149426412e2fd4b300292088c275f9c878e8513904833a2120584b9339159e467badd5a5d725727ab833a3644bf255bee7c6f88c3ff1ec640afdda67529b8711e1c185b7006020de2f349e3c14c285b0ab2"}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x40}, {0x4, 0xa, 0x2, "b4e6afa584e27c11b6eb"}}}, @TCF_EM_CONTAINER={0x2c, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x100}, "2cf6e9e4fb61919b8a1a177e217488d42630f42cc0e4e9efa234630a9cb0f6fe"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0xff}, {0x20, 0x69, 0x7, 0x2, 0x9, 0x1, 0x2}}}, @TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x1028}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR="ed", @TCF_META_TYPE_VAR="c39d51"]}]}}, @TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x800}, [@TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_CONTAINER={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x0, 0xff2a}, "2dfffa313001a1609b45f8d91fd0d4f05fccd46f4e7b5de080ab4db581f3a7f5a0c1b2764b4e377f7f7d9dcd588db51996324fdb75d14af9ad3bb36d29"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x9}, {0x3, 0x0, 0x4, 0x80000001}}}, @TCF_EM_META={0x50, 0x2, 0x0, 0x0, {{0x4, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="42510d1c36caa575", @TCF_META_TYPE_VAR="82d69766862393", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR='b.\r', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="71ef2af147de0cdfec01"]}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0xfff3}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1}}, @TCA_BASIC_ACT={0x1938, 0x3, [@m_ipt={0xfc, 0x5, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x401}]}, {0x9d, 0x6, "433fd051aa74fb64c38117490fa6b6886ff8bb8041dcbe27d677e84a3d005d3279bad400ffba4e98edb434684ed4dcc05f4bd655b00a8f398676ed9096af6c92ac1606db9090ec174215f06b4e066ce383751fb7d999dd608ae466692a307471acf71e58063d5d31e6cf5b9ff1948714878adcb232544be47f8dd0fa3df792bfcc75249e40edc1086e40b490b8b44d7d4a40dd08d0f100375c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x40, 0x10, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xe0, 0x16, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, 'SMC_PNETID\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x13ca, 0xffffffc1, 0x0, 0x2, 0x1b69b960}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xfffffc00, 0x1, 0x200, 0x7ff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x7fffffff, 0x10000000, 0xc88, 0x100}}, @TCA_DEF_DATA={0xe, 0x3, '/8(`-*@}+\x00'}]}, {0x4c, 0x6, "90d1e0a86da15e5aa66ee550f973e8d3eef710451c3bbd3fd5ca1cae23c1a8455734c4d76b091e4e8ac06a032212ea598362d9267a73bdd506e0a1db24aaaf38b0d1b68b85c00406"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x15c, 0x2, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x1a, 0x3, '\xee!,(^*@--:*!{[\x18,u**k#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x2, 0x7, 0x1f, 0x180000}}]}, {0xf9, 0x6, "6cb1d235faf9b613365048979712d8f59b5b1deb6156437b0205497c30cdf6a1203e987f87ee69d6d5d86fb269e79d42a8f0437c019a7977a03b485e35e66f2df8c1032cc734b76d84e03f59324fffa23f404c63ae694dc575786824bd6bcbd400480bf203eb90e0a5ca15d890da9436001eb99bf53ec74b21201f3af139c205cb9277c106578010398385ae1302c0b5444fcf0e1e654098674cb36f847e969dd2079b9df136c8e695933e996509be1981dfa3caa3fc52f5961a1d396a447577cec86fb7f14017199eb92891063c1e07464d4e5d7054a1ce980a4dedaea89427a660d2b5d3077cd9a65979e59f1573cda3c163c018"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x154, 0x3, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}]}, {0xe9, 0x6, "9f7bd554e49a11b78fe75662a3a3a2c936db16eab5a7361cfc4fdc02e62e038904258c662176e2f5e38610a7f38ec17e9597a7a755c4056094f54e905655be42ede9ccdc646810785476990570d355d1bd0e3f00a0f51986f67499a10d1006fb6f6ce960f4a589530253cd08801cdb223f93fa16dd5346564b5021f539a601628fcf0b58d083836194e611a9c525b19cc401736370652a206d22bbb08592238dd340a1b6f2c2ce8164c7237ea05f9a20f668e97879da4ef4ae8ca8aeba34bc9fd028ccbf8bf841de14426b9144ce85229dc93c101d8bb35f335edf4ef8493b88113c5db8e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x2e4, 0x17, 0x0, 0x0, {{0x7}, {0x23c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0xcb, 0x6, {0x2, 'mangle\x00', 0x2, 0x8ca6, "68345664f2e48f5cfeb1e33cecf66404c49f6959f0cd944c63d37095aff192ec8c0c1cb1ccbfe1a13b0e7dd9f7133d89e34049ace81d7186543f6c23e897d604a3ea7ead417e92ca9eee289f57cc5b0298c5a955144dadcb605b78bf5414654f854fa7a091a2c6d47f79f67894361b5b9e466a0c031c5736095143c42c899791592395968c727db6bcba98be9905646be0b741e8924034c6a54767e2c6c2dcee2f"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x104, 0x6, {0x1, 'filter\x00', 0xbd, 0x0, "9d8409017a481d91122d1f6efee00ae76db51e2238102b2ebc6eb2bbf8e42087465dac058c4f7809fe6bade25754960028698b08c3d3ac79b29f649ff0db3eb7615dbdbb62b8ed5b53a77a811955e22c31ff3bf94f6a675e6cb659485d98155cc16c4e6e1d1ac79a2289668958397b4e6c684170a62e685ba63804dfb11fa32eee537498e77fc9e46c4e883a6e6facecbd626ac46061a32405a271927cea1eed6402a9ee8aafb5a942fc5cb6b1360242fe312be9b8b718e51860d9ef4c4b4a52445a5c3f3b8493f990f1d816614ac09bf680f24ec91fe98fc54b"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7038e5d}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x84, 0x6, "363f9561499b10aeaa235fbd18cbff021a3f3afcc349ca815836abc0cd9801004f572e98fc8604dabb651c6defb583f1b0121d37fecd2d8d4b6afcf2b0dd7633ca6579a8937733dfd791ed5de82b644ff4bf15a218db76526dce6922ab5074e842c8eea7dadb5e7850661f0cce649c5a9f81e049ead0c62efa8ab3d0f8749972"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x1088, 0x1e, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x1000, 0x5, 0x2, 0x2cb0}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x1, 0xa7a, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x100, 0x85, 0x7, 0x10001, 0x7}, 0xff}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0xfc, 0x2, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x1f, 0xffffffffffffffff, 0x5, 0x6}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x5, 0x7ff, 0x7}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x3, 0x3, 0x9}, 0x50}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x200, 0x8840f32, 0x10000007, 0xc6, 0x4}, 0x63}}]}, {0x5e, 0x6, "c062a711b31c663ce1141596530d8437fe99df34671cbc05456fcc666e66ebbfd27f76664e0e4570ffa75d5d6a533fb347e364b3aa91afb2a732bd4a17ce3827d69480936d5e33229af666eed2dc75a2d00818b1df81bc903a88"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BASIC_ACT={0x330, 0x3, [@m_ife={0x90, 0xa, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x37, 0x6, "27869fa339ae97b3a9cb31fa389ef2137d5ce0b42e34bcb6613f4b77cbd5948f27149f93a5fb20a88817c1cd49a3a1adf9c406"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xe8, 0x1c, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0xc65, 0x7, 0x31d, 0x7}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x428}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x3, 0x1, 0x1}, 0x3}}]}, {0x7c, 0x6, "7a3552387ea7552459c5cb766d42c49991b748031fe7d4465e34e36bd3d145cefe22f9c597bd9858fbb4db422bd00efd5f97fc0e073f028912ace4e60bee44838bc7f1c3da565c4e1153e3ad63a001d9d18fc1bcde2c3c270edf7bd129607b3881740d7ab701b6582eafbe4621d242d55a86f54bb7adb00c"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_connmark={0x114, 0x9, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x35eab88f73a65a6a, 0x5, 0x10001}, 0x6}}]}, {0xc7, 0x6, "d24430677d237e981af28871f379603ceddec4021be8e5d2753e50afa013a62843d9cdc9dbaf8ea7d3c34ec3e995a6a2859a8e47f80f79263e17bd4f793a7f35bc2e402774d6e9b8d435e65cde896ab3c6897ac2372604b38fac057ebd51a678442366faab51a41f5e2d6d0a416851d83c5d551b608e24862ad72a7d1333e8bfdde1538c488fe145b8632b2e0ae763e7de2a77fe752d80e4a921e37df4c05760e7e3a8041d0e82a594faf551c9cb59ca860c70faac28390da3b51ed3d07df18ab797f3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0xdc99c8e78b9f6ce7}}}}, @m_ipt={0xa0, 0x7, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x49, 0x6, "23a5616f8aeb83c79d6bc290dccd6098a1875dfc68fe65803df46d6915ad6590183f8700aba0ad3f4dea4b8402ecb7c8dec6d29a4a5d11701f15831ff018c8bf0cd4630a0a"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_rsvp6={{0xa}, {0x2dd0, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_RSVP_ACT={0x1164, 0x6, [@m_gact={0xa4, 0x6, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xdc8, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x457b5f22, 0x5fc, 0x4, 0xfffffff7, 0x200}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1e29, 0x2}}]}, {0x46, 0x6, "c878047ce294fa66c6e1a66cf5e9146056840f7cd6628b4478a445e47179135518729d288f1d72d41f36ba3800df93a35e2c835a5cd7a284415c6958dec2db861f9f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x10bc, 0x11, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x1, 0x20000000, 0x8, 0xfff}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0xff}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x3, 0x5, 0x1, 0xfffffffc}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x525ca}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x800}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x922, 0xfffffffb, 0xffffffffffffffff, 0x4, 0x4}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x1004, 0x6, "66e4c1889092b331f4355cc2692efd7b64a2c19e276dc2008bbcd732880b5e18e7c0b70a1a80590913772c6f2a0b5839425e17648da21f9fbcb862be64355f6c31602bd9829cacc5fdd437741c637c0af2d144fdd65a8c9cc775888f25895a7c52d8491933365f4ef21baa07d6dab2858dbdcebb05b2bfdf52a138647354c5ec8536c6bfbf2738473007ee49408f841fd952495974069346a91cc2ff2e6dfdb95c7e31e6357ba77bf8d88c1717ee19a682b1d2cfbee00898b0c544e0dbf28517d09daa5acef2f57a64e68b7b6d44e81e29931b210f0b8bec60b71b1f0787e2584230eb8880fb37e0f5075a214dd0acef820b3ae341910fd487ddf70b348003dc83ada1aca62cf60fdda209d1cc7799ab4b6e9c0608c55432293fd93a3eba50b1215f0b73704815ccbf924b80137ea9f3bda9f739c0e82713662eb7b734e44909d685268f690a85b499227f4364d12b498091b7afe9fe720f51424cdbb900d5f51d47eab79affeaa90f9c94be495e893a0ff536759c8e9337f1775d07702fb8746114dd6ec17c3111dca31aede845ddd049a86a3bc73f01681d3599664383e4eaa1464cd686792c80713cda4df52b81e0940c9cbadff355839fff03c61c5d2fec29b8b498d7d653e3fe7bee3b945758a65a706cb9ca56162805a31c3bf12eae78ad96f31438c650097d2ebcb86a4db2667fc8c280dc49e15d9344c7e72c733643e21c28e5622218bfc9dc805d3cd18d810715c732be5a3b3d9185d47eb8a32ddc477d0578d1b3d2412f34bd66d997ecc5f20fea556afbcde80489813d10d39dbe88d699af9e20d7b34bb8084fa2e1812fbe91d771ac02815e9b5c559ff0914b912d421a47419d306745ad05b60ab67c3998dfe612255c007566e7cf1dcaa77771fac7ff51f5f697a6ae1de78712c969fbd279796b11e01beeca3e627f2348b10e307581edd87404ff3c55a9b6cabf8dd6bce64322301316f4f6f9cb00d64fa7d3b8de25d0f13e42489e4907daa1cee3bda9f874b94a96b6a68537df628f5944dedc202f2ce0039e472ff3ed5ccb754e88caf6f0681acb0dfa263f2eea2567060fe5b0aef8fb83c5da36205bded64519b9f5b5ebe7c66abac9840ebc5c50c1e95d1eb2709524b3d4a0241c0142c2a1c25670629f15835d9f32f84a54c4eebbef2ef5dd976a50a2dcc2ef5fabcf0dbcc320cac2bada41adf45e9043c33cd0a5be05dd603d7d9da3115f00a52e22178a3d9600c948230c96d059a61ee843705a689d99a353565a3a29bf08b167e39b749b341bf200c0391d0afed566d41c6c5bd24080f908e2759695b5104982c7504f9132a0e7246beb4a835642893162b69fb5ab1ea79dde211abd25908ab8145e608ab6c8ef53c25e847533c0fb51770a594345d1876735357ca892499f25c8a86c298d86475cf76be16bbc7cc95a30dfaf5fefce17cc77e1464c7e36008d2315a6489b1b826b8deb510664d93ae7773c05324372a94ec3bd1a4eb944734950b3a96743cd8b6b3bec3bdcda434058f27071196fed6477d7dcd4661d61b403be11a0226ef6b75e73b431006f06b646d7424400a63cf2a81cfd5a6cbe3a10a1ff0e5d26c51ba492fbd8d9e1a3e4d423e7c54466841405421ad6ded7008d6385c2db5c1f5aac84f9be5227222d4989ee77b63932230ab4a29fe011d155b6deb677fded8b90d1576bb5e4f6f4301266e972589ce0bf75ba2f66081bb2c803483f3b1933d94e8b04b9c33a218f240c5fa782bcd6d1857ec84149b8f62b2450a7836341745516bf4af27816516a72d1ac1f48105a7b5a020834346b70e1a811267f25f06d851bd61239fc8bf73b427802016473bd7a007941535ccc2e99a4aee114884620c3dc3ce663985a74c0d3f024d6d9aaf7874463fdb74b3f8b820bce319d2367bef9e466decc91a3e9ce8d5d909f282518af081fa5af59f7790c369062951d1d5cfdf65c28da6e87b723f1ccf76cf1c1f7bb45778b3ab6afac7905c0e616e688879bd7e7b31ac6777611d04be128737eca8a153844ee4a602eea128df458fc337a59fce6c58ee34dd56f6199791b861cbbf268f00fd50859f655f5d5408801fd9532e089bdde3bfdd87559e7ec8caf9681d073f1de5b14fe63e198d5734242f6570aec777f897b67c2f4008a25c3efbf13b4d50fc72d670fab077bbc54737097a28d1c422773207feec62331438935c4a618a4c274f05b17481dcbcd30175fc4fe7443f0cd04b1e1426159a0ff581fe289669563a31b991402060a7315ec7e46d4850d8bc0f4232dab47ffd428617cd2c7aec8fb3255aed8f068058eeab3b4cf6db4cb8b8b339baafddee57077dad22350a06fa0aaeb9788d57168651648209a293a88d0e2c726f18b87bd4618d88757a1f7893b5e8bf79ade9372844e9f3913a13881cd96b8a27c609ef0c9d3cc9b40342095ef8ee18b3eba93aa723a7829e343810e0d830bade13a993ac9f8274d46641a47e6cbd8b419d4d902bd6cae670bb5dc7df7ea9cad3b20912b22c4ebf97b297b15a11a1e698c3818aade409cc1dc4aa4852d7a7d115e04db19e1a6c7cb0c786102d7718e7b3c32b7ca6c707ea2689ef4a3a97c372b7da66d2a2b74b3d4359683f20c3217bca70c67b20123639a93379f25e0551c31eb7f75d8b6935efdd9c22e8816bff45f930e535925544d52e958e384da352fe0a61333e0088f4f27724a6e2d0ddee7ffc944a28cc6850020f3e62cdc550342450c48a9618d3beff318226d9e86882e06b1749755eee33c404550865d6708f02fe0696bf1022377c552c3a958267cf0af1c88962e525ff0eaf73d2a7cbdc9fc684361ab5fa2df2c3a219e89f89a4739ba5a5b405a21e0dfafd5e13b01fa01924f2b2aa424e4e5e02c3196cb14c2e535fcdc25331f1f7bc11f73d42661da30fd6b3ffc9ab123f9c7b97ccfb295940283d607b4f9b15969a7c4613f59ebc0b5ac8b54b18b9fb7f81f14243911e5810490358f5f3f429e6eb6aa2c4083fb7195ad7e7e9b0df1d7c41223ae470dafed0dbd2cddf2fa312c2a03f69f66de70b089df744e5a32859caf8a12f802fca6f9cb914629c4df001120ef1325e68d5ffb118fc9422b9e438c1fa4e2a9597b8f80719c574813521d777aba36c79d30f85e7aab5bb1f9746c7e50600e08f418818fbcb7c91f496ff9dbb6d84733068e35e35a189badfa6e07a62c31133a97adca26a961853eb5ca1075eaffc7635c275adb616d2b46e1188672f9683651cd6a775f86f82d2dbf9d2973841ff3cd6a1798ab7a88b15d7a16fdf2ec160153946a15f0bcbc3b26d2a70cec9c23abfcfddec0199fb06510a1efc3aa81b7ed287b8640b7986ac6602db4480c655f2bca01b708d01eb2cc56218a6107896832d3a756241590ff3ab79745ec327385ef6d52cd3a296a1f1c30b90bdbd7f4f60f6f0168b6e23e051ba606259ef51b52f3b0eca5a62230f70fed96ee0b74c5f425a9a8d8999112cd37d5a9dd9f66efba371a487f5be59ca387d6beeb09b0d67793f9f52646b753da3f6905529ac0cca24a67eb79f3b7bf9c5ddd532a77882ade4a91a2349b13cb5ae2df5087358ca74d25fa667402ce69ef6dcee817574c65de17e9d0fbaee209681f9fde37076aae3aae87d72ad27f50b6d99798b0a04cea4a71b777c33e159b2aa539f4a9695ce3d70e3f7e1028dfed24009dd13249eb18d6454a86f67807525a0bc151fb10a489318dcf637d814149e795f10552982dec9290c1951579ee051a8ef28a40aadcc8a8db07fa09305512fc3e36514868e5fa2c02bf20e8623dad4126d12a6a65457fb8574ec8ed286b8fca59cc31a5dc961530762cc2d227abb366866e2cd98d7a2b6f20652ca44a2e3e914cd2e39bb5647912687f27f76c69a3c88079d1f01833b3cd17f9d866d6cf96c7299a9c8aee494adf9b4c649272bf4906c622bc533b97783e04301f012faca3949c0e7e931354308af67f75f6f4746ac0388021058fd2069ca5b51ac959288e641a18134ab557cabd42a2a059ba8e3619d52306928c5725327d7745aca6982e36d89fa7fb4f968ef711a5ec4937d2407263b568e2a834ebe03aa171e0d1d9747ea1ecd9d76e0a0cc0825a3adadc073a7715558e2ec51d4cdf60fbd92ec1f377b7780908873397f2cafc70710ff9ec114e2211dd5e350409a529009de00102ee1351c8c0ee15e6fd6ce1d3d408a4c1d6552a87807ab142f640fb77e3cba2455e7fbca7f88ee116e25d43c8bb51b9da2e7949e318cfce28e96980bb4c6221d788bff93a85acc80d29c33c19628e4914d4b26e2fbf3b80099b3d9087f10ab4a2b658f35c10c8c8008c9de8ac09b892427ada6a46eb1efa020f68a43ffed1dc9017f297f66c2ab665499a959adb6080ac03cdce1f6aad0b81fa14242e1b9310792b94f6294d7e1bb7356fc31fabe1c072f210162826dc88f6e3b3f17819ef17a0c1ae404bccc02f0e1203ca0a9c20c3db41941e7f24e0421d44ba4759840c5a2cbe140eae052f7baf67be96d8be17435c1e1cf06cb271e4166e00097b809aefe61111ecf344264a4ddb4eefaff616e7545cf9d4a2c4d1939f178a3b4550564aeea96c472fd919a79ed58701908d5cbaa860ec7146e8a36aa9bfbe643dd1eca6ccd66daf9b2c81b5c855ec29a1a3af9fcf18af9024a5eaf247c5811105068bf9d8de2e7e9fd59cd2953a126a525918b568093dc620359e42f370ac02145153e7d1d4c7ad4de2a182731577e7cc376b3b7f59986c68e6855e693361936d01b13017742c676baa59f75661956189c08d53597ff1b7b37c891693f539a0e220db8e64078f1e95bb3a31b980d933676f0e638261f92f62505b9236aab7b8e4d3f64951405bac31c9d9380cdb875de7b33f9a9146933714409186a0e1e435dc8565b07193f6bc98680108720e80a6f5c4b76c2f5974c755d6ec5b352e15f06190c8ef5cd2fde6ae7a32db9f5f99e575202d5e8465bec1d55d9f36f47e3682dabf4e503160d8f57ace1b3a5d74bc2ed64dcad9b71bf87e8df96185be6e7fecc781a5b18de36a785112bad0efb3a754e60eaa4ccf2e09b6ff1986dfc8d6358a4e1efc5e13e7c5e5bfae16b42451b474be660a2e154a1daac51cb1c96cdd9532342e5942c43f52d2f115ae92882c707af6fb4ac605c9e25b27a62a639293f11c5293753009b2734dc77b448aa230dde6a99bb31e093e71d60ab3b53c4021251931394b9e7a74f9ef9b8c07c1dbd04052934554a34c1e0e7b17dfd55b322100b5787bc3b8c6263cbc84935c48bb10a504e1be45d7a382a91ee375f0f8eb2600f8c0e4dc582dde99bf931506fa6d38f8208d8153a331f0f17c0a8ebc50205aa7f369817a5a1c98736cc605d94f9db3150e41f202ab6e4e5144a7ecb232a85e7d38af703cb1ebc907ecc2b443af610d5d2fe3dd69fa0e87b70d3c22a559e87aefeca53c5999f53b75389019c125b54fd8c618aad8a5be00580ccd6318c074e2b6f145ab0cd60582fab8d747d17a1f580637d6e3cd285b73cf7677db08f558093e768081f522a533488230c478c09da4fe43766b49dd3a4778938366bd38fa4e33f237fd8285f3d0ecbfb9ab352952b709f1509c75caf812e061d621eb71f53d64ae5344756c177886792570d62bbcc782897506ce1d38b8ddef390da9f03ef5b08825bd4ca9de33a13eda1da7a979c5596867ce485eb9270dfb10efa73ca524f1ddf483caa4e48d9d2346e4c6c92ba8b78ea6a81c0ca0b0cf88ad578b793182e8f194a6a3743e640be9aca9f42540280473fc67dd6c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff1, 0x10}}, @TCA_RSVP_DST={0x14, 0x2, @loopback}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0xe}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0xfff3}}, @TCA_RSVP_DST={0x14, 0x2, @private1}, @TCA_RSVP_ACT={0x14a8, 0x6, [@m_skbedit={0xfc, 0x4, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xffff}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8000, 0x3, 0x7, 0x80000000, 0x7b8d}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x84, 0xffffffffffffffff, 0x7, 0x5}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xfff2}}]}, {0x88, 0x6, "22482617c3f208b4021b40f9eb2b5d300a6a61e332dd6d541b0aa04789d687caafd97d47f7e783ee5f9da2df4c4121c558d9bf0a4aa31f2472c9aa7cb2d5968b41124ffeb7be8878f444bf1f9f6075c9e6872cb6777220c3506f7eed69b8fa13a58811695856db9ebf8d1b46d4b269c0fd7cc1708ef9ebc43bf6e72e9d46cd28aa2276a3"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x1080, 0x8, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3f, 0x7, 0x4, 0x37, 0x10000}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7ff, 0x9, 0x6, 0x81, 0x3}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x10001, 0x1, 0xffff, 0x1}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}]}, {0x1004, 0x6, "889a9b0fcda661c4fade3c3a5ead88fc835c7a98265d0c06461ba4a6a98993a0377932579f301419054fa1a3b38b0e0bb7338b54e1cf5cbb0eebc757ef1c720393cd6647fbce1bdbe8af7052a98eb949fc50ce64408847b3b35c6fd9266627dbe8cbcf1f56af744b6fc5a49b068dd377e844ae50295b9741744516d1fdf8d6fcbcc478fd117da9b0147f4462211daef2441d1e54f0e7e239d18ec1d6cee01a222b0a301d517c8ac63ece343fdbd83db649de0198fa4b8f5a77230bdb016164aa64115e99c518bc15d9a7433d0a53cd0ac38c714b818223260a41415e466754833e2de0a187eb2dcdc9c0958a11afd8084f88b0ba858c727ee6270c78cb3d67d413ea3864f88c7ef94306aba443d1bd6fb15847a2b53825f9101bfa1794828664526cac844418ed67ee11b983314a3c00630a2c49002848c69d12341827d5d435227a269309e4eb9db4f9172488f986d3e7c5aad39b16d8bb227286f81d59683790f33751529f25e993ff9d919e7f3fe7e5336fee44c8781ec8219b3b2647a023759f0237c81ea0576114a58b9ae47f03b3333699c161ec279e7e383e76c7a5bf5c9d74f9f2af75fe7fa5412a96cc5cdb92b9031be18d7272f4dc14026786fab3592ca2d4c03e7a1ceee9bcf7e0633f296f65d745132676996e6915dc85018de59221aa7e451cdd7db5cf83e167e4cd6db55af7aaf381991263c4ceb44b339caa43fc617318330cec8a6403e9b0a7dd2884c268b4696a258f6a51c49cff843885e0d1a1872bc060dc8bab70082aeb28e4347842bc479c40a7148de549b15961ba6639bd4137cb9bd16c5d82c8e2f16e8973b2c493c22fbe329a7467ccf7bfd20f6e83d5777afddbd3995face5a5a556ec940b8c5eae5fa56c0537a5471a32207660188b0f1f58e27e6d6ac44ec63552575701f4e30625d9ae42286b95a70ce813d11a7a3168dc3dd5d70fd0e2cc2f10a20f2a01b4823a63285aef7f6891bea745a762d85acb56d8e23899781a8f3bfde2f8087ccc305880ef6104bab9efb75ffcede863e9c2bcd78a19b2cc37f933f4d103b1759a662856ae0c77a651c18107f877e57748267e47d8e09703a98c88e9e58944955cbfa78d83109540054a15524239e35c2ecc2580fe36ae8fcfefcc8ffb12521d220a4ee66b1ecc09b76f7f6f66121419c9a7746a0968a918f7f88961b14317f343cea94982f879d64d064ac68173ab16bc1f402801394519ab9db42e8467b5258ab09ff6ecee937641672b0aa858408fd0769cc6937ebfbad692573383818d618c37671e7f90a282ec249a6a75d27d94fdc8f1c28da7594cf48e2ee0cfd97cee1648419760485d07ed3b3467a196477c5454a724f628f8801de7d0a68d7816511c234374a103d3d59f622f5e7382fa3f45ead0afe1030790559d6fbb132f2481254aaee4760851f143fe9ff3506e77aa684adb27d6544ea13d1d1e5d9ab27b0159d599f13cb4f5996a2f863c43112b19559a39c37c6dcc8c20698a3ec1a711286f5542bfee684b8a14d07db2221dbcd0633ee7cc9c3ba1ae719c3dec24c109be0c4b4187cdcd365d632b9534a5aea48a0b77da96d3e6fc6286f4e3724b44dc5f7f2745cf9353fde2182fd63a0f55083d504a107b82975f9ca12c8f103e219afcd66db643db2164086c30f31199bc3fce9857d3388bdd136b64de9223de289611562c86245d020f2544b4613d4f52aef46813241431bff442ac939220fbac22a52ab3f913292ecd3f9a50074706a50326707505c2e20bc8229bd4b587b57476de466bc47ef2096f9c386186828c2daa56ea018884bc85d933bd720f42037b6f2c2ca3ad0481c5d3b632fbc56304fd8bd5ccafae7b29d52c1029a52d69344b8ef849ad1a28258128867cd7c9862ca90bfaeb2c2dcdd9a135828447c54eb5d39357378b9496d813e1f270f3a336640a3852e58b92196865d1dfeaeb157bbee9430149b3045ea6692701ad9c4625ac2ea00b2ca5a7430641e3ccd1e5bfd24d62722a479f317c994ea1160c209cf622533a64a44bd8c0ac84395b01f692a555b1b0829c42a0563005b36071afa413978a3e53309755885da21cbac3f8e2e5a5057739a408091003c53636aad89e3b793c3cf31cc77a8d92e9e8a4d1f1838ac894078f5dd7938552848db546363f2a59330973a6382d52264b56632b6642555b081bc09e2b98e8cc198cc76ff2dab1d94af7c380d4c8a32c7a45f19d03a152db1b4ea8f910244f7ffdaacc725804a1ec2e8bd3e2195dfb2c2d117d24eb92dcb6512b30459911a3d52a927881233a16bd2d7efca212b26aea26b51e108e503ee8df0c92277f7ccfce5dfe3c0f7027588de903989c837780cb73f6476a37db08cdbe5710606e6596ac52ccf79d4e97e1ef0933d5692f6cceb73bfd12b2490dc1b72b1147afe5d2a68ee2e29c87972b3753fa3cbcf977d9743d2c683a555521ef5874e9be7a7567e9db5b8434ea9933f23aad42c884b4838ba86261d76339e8dc5c14381361d30b55aff6f255d4c5031c470762a0e731101f6266f0f293d85a1d52f04460a02d5c8a5435719a178ca491a80afc84d3c33fcaa8c15c395a0213d55efbf022777ae8f1d1fabae041a54ba8f8df42bf1dfed3065a481f46a027e0ba16620dd23ea6984f059bca49dfaa6e1f0a60a71532cd1ecd29af5e50eb90663d912d5aab9f4f173430bddde81ad5f1553b73b5d942d6faa6a4fb6e27e23dda5ca41be24d46b6ac9d02f4f9721e34be08b1d9b8423d8e3b3e38e1d4503f639d4db483616a61fec544e1992d6d05567f71ccf07df7d242fe3b0b5fc2cc889c12e92196fb8670fed580dd642e15d69c7ace1df97f156422b96d2bbe275619a96b8054add88a68b5311dda49786df8ff300a2f9779dd5e3993b7dae952f34c676a58cef78affe28787402415c661a138ecf2a7914475f8f6b5b92d71f03593fa714a962043a08cddd4428fdef70711f83d8c119aef0de9f2087adbba9e8bd2c430143cff6fa097b183268be7fe667ddf5239ed20d6b40a6cf8be9b5bfef5b021ffc92825214640cbb6eae7b576ce42c5413f8889f1db7f67f344af76af7becbc28cd718a1baeea66257aa34fc7e180e6dec68b30efc467a4b2d8ca13711d5eb1107459dc0afddc4e311169ca5956747a795b7a337f037d1469af6b96b73efc56946851d982a5764f11cc990a9bd13db0f4a0d3242f9709e87fa1f3d3ab994db2a4488c750adf84c9b865bff7b6c5a5b18b5b8a888342b9d483e958d85c2bb706c0e83641de29c231e02199bc86d98b779ebd530ab48377bbfcc56c8d501cb6c32744669150bfeb60df9014b2a5dacec6edacf8d8e9c85510697ca4f0b55a40f9d599a14aad51e0f448b870cd107351d6e1771c9f9f56d1a7d0e68c7bda913ed8fda52a328177e167f74df40cf5168155b3a8d424aaf4097f955eab43efd0d0569b9f3b79ab68566859c53e6957f020376420acb34a38adbd6c7fc2c396670960a0f52898022e6bfff3b874955d51c7cdd01ad500f13ccbfa1b5bc0c71b45e7dbb80b88d5de1f539449996d497fd214edabd0db06b2c47b71f5b6c807317d0f170c98bbb572754eb6858195ec46cacd0bba562144b7476ebf08f0479448f62843fe40deebf2e5407e1965828645618137778dd8b439b16bc16deb815c880e759e60bf544e9024824c3cd9299ba226b93191453ee5a7b5e1a5ce0a4f3c08bf843a47425ad063517e872e44c61d5eae5a710405301a280c8b74ac22a1c2c15cdabc2faf6fa69f81de59e7f5fc52dc7bca2acaa5376ea8796d972125bee4418910f39f49c817c536d2dec2243ca34a00c90ee3ad3a2a86955b5ee23480ddf52ab4504ba11f1b53e1ea31e3f767c02913475b9a8e15ff4d0d9b64be8e13728a0e73c796f840f647320781e5021136965d0a281a419579b05e8647d9f8101cc46b8e3cbb1c5af7b59c2ba1eb99068fe9b264edde98c9ab7ad91a018f5094070aa47cde8013332c429495a0d171bba1ebbc70a29e79735eef6ff9aa2d85fc3ac442b7169fc9665b59af007d8e06f51d2ec5bf693e33e483e69a0c01ee2facd534f0d85d7a1dba48c52b7e9a0a8e010502ae711096d1cadd131c250270871c224915b41b593a460f43ea3e6b9646df279c4cd3797982ba232a163dda1e54824c6f933ef16f3036882d93da4c2835d764bf104ffea09722b1df1b473b5a6715f2fd8bfa9ea784f8e87c678aa31653019051470095c86741be712588bb176f72415268eb4501c4c196762e7492b2b29a09890c6326706b1deaeb50b29ddf9046000766b3a6c855ba41e206c6e00c1762670ce4a2f35d67d0a430625a9721ad5d9cf6f21304e30731cbd9e5d80db903e5f258d1714df8551324690e8fb1fb9238d6e6d29729ae264e517d430443449ace7b0cd92f63e67bd01820d520f634560e279b3dddcc02fae956f935519282831cf29f01fc93b49b62728f33eb868b512249fc2bf16f5075bdbcc3539a3f67f20d6284ca4c2ca831ee7fc0afacab5617a2683611ea3439ced14a48ac6379b348ef257328c5cf37ad16de3d0e38a8567772e024434b9740fa6885035da2767f218573a057fdfea4d89f20f407db36c6b816c3ed2c033045370ee140507e70b113c24fbd1c92b6ea38326910e3c695b87097dc929a00036f3882e321bd2e74c11b349100d0759653028041d63d65a9158df55891c034ee947d8324861a933e8f896e86b03e4ead93f8067ed9744a979ccd767000cb990846394c5b57718f74b40cc8cf34f1fab26a43a0ffaf048bdd3c54b692e79a15eb80417285b54b760c8f3ae5f7d9ff2bbb64cba5632f1336e0e2178a26971cdf7ca6e7c8a50725d3bcf746f20e066dce8fe9c4d3ad2bbdfec7c4642cd2a43ce0ecf50e8d482fc12d3ab14c34d02df67b29681d51b7e555ae51a9601d24154c863fedf1f6db09bba84336587d758e9554e2690ad87ba1295f12fd9b44ce8855725638eae8e20b3372717da6e0b30fc0a57db3ff5b38f77e2a9dc5345f32e3fb0d02e721c05ffcea2feecb8fd556ede298a09b92ea62ff69f889dcd70e311dfb6f1c1b4ceafca961e17cfd171d479f9256fc56d53cf5490fd6abad01cbc0ee9c834f72548f7cad4d07fc4a37d7ff7c64f10973632437ac090e6f05fb0ccf36e897c3072584820676e498f59ebbc376898d735250e6a2e810e397b9ecd6dce9ed040ec295977e490821f0e3c809e2f70969d8d2ba0c31b396d7ce4e301dd9e09d967cb6381650f13000426292e038abd4a0c767c527ad1d50b76190bf73d00d0bc27e2351744aed36e730d5c553bd2612df3adb5064860ff442349559a179a08005a45726c69bcf3c68c7050bfdc998d5811b88266aa892b7dec9891f0e16c4faf5de4b844aa3e55bf8dee5b559d35aa9cb44b0fdfffd6e359386653e70fa9a3879d89a0318edc0a1df78ab614aaf891af913f5ba6cdf038498a83413da0a73a2c39c3464b77d45c87f87be705188dd81526e88a4bda06073e3bf6de11369997d676142f64746f4db7ed08b398d0da0ab7febc688675bbf6b1ff925eaf64d84ab7822f0d6746cbd7b4e72212873861b379a9806c91470f393a0bdbe59380aae9112af121e1563a2430a8cda170052cadb5001bf5637c5547c0d3c961924c7d3c1bf2009da4bddf8945c479b76b64dcf38c62749c8b5a45e2316ca475febebd9058e8521a4f56bace2b13a7a8867a8e66e10ee682bd4f258cd042c2b32dea10679c17729156f996abff19015beef3b0c3f235dfc9c3c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0xf8, 0x8, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x717a, 0x8, 0x40, 0x8000}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9100}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x9d, 0x6, "6baa0810c89b37b08510bca1e71c10423295e0daa8cef82dcbbe7c9327fc74ece862229e870cec9646c1befb90eaf49559b56e9f9a86133655c16db0b20f87e7e7363a619e582743d83d3c391403da52dc9b5160351271ef7d33eddc2c16347253a03ad44689bde147fead7f14f9925142e3f442de603f2ed5a90184b1ff6b986147467deac6277e7bc522580f66be0b6b8976a641293d51c2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0xf8, 0x18, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0xbd, 0x6, "c8a88617f95869862f2ef13f7f345c2b8be3c1f76afbe633820af44e4af915f1fcde4f2f34378f4772f01e16c7eebf3dd239c50ab8060c1a1ae88f6510bcf148f4c50124bd55a490899555491b30eb4da537a377dc32afaa1186fb1be66cc674c5e4750d0fb1aa36a635a2bafdcb07fef332d601dc7d5a7c4a9ceb813d4914f488e1ba4d64e08f9e98a95b3339eed19f6046c98226e8e65c3aaf3b4e4d3ea7f86ed8d56c4d53d1523b924d3cd253cb5bf07407f2f07e559177"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x3ff, 0x81, 0x1, 0xfffffff8}, {0x40, 0x3, 0x80, 0x1}, {0x8, 0x81, 0xad, 0x7}, {0x800, 0x6, 0x0, 0x4}]}]}, {0x3b, 0x6, "33239bf31ca3ff8b6a9730f7d419be571a136cd05ea681eb40d6040ffbf8b068af9d58b565c23696510a4003084a2550d9f509d6a12c38"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x3}}}}, @m_connmark={0xb0, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x364, 0x3, 0x3ff, 0x61940000}, 0x1}}]}, {0x61, 0x6, "243673dce470c46a3ea7085e7dafa25ef7d16fc1ae56ab7b19a3bebe2b61691f5750296583943b92d254ed120fa3d1ddcb21df07884ece64ee627b0dda3afd210cd20610f88d100209fa97fdd5770a7608f63e6354c6b19738d4bcb022"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5}}}}]}, @TCA_RSVP_ACT={0x76c, 0x6, [@m_skbmod={0x160, 0xc, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="aca82fcac59f"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0xf5, 0x6, "200338679fb3a091ec0a60a31fb3eaa9dd65ad688682e0da26cf368d8e45dc3d8f214198bbc5ed21a62f1d97bc6b58e69b9b4527ba7fe69ec9ea863b93f60f0135c908b915aa7aced4ef19fcb694146e0ac60d4922f3054158740abfeae5ef53d2e04df2969b5e2cce97c4c18d75337bcb9cd7b42956edff905e347934b0f7b8e61d4f9fa6d8169435f60e09e3c646349b0d939f4cb9cee850638f339ef0b75c36431b3e79f6d8d14940548f12116b169348c38b934ec0f9a9c94e0fcd6920315e820d7008e9a24f4779f9c6a1b2bfc84309e1894b9896b81e3366c8562b26271612efdf6c9abd32e0029e4649eec11b19"}, {0xc}, {0xc, 0x8, {0x3, 0x6e2ea2dc7d49e41c}}}}, @m_skbmod={0x7c, 0x1f, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8000, 0x8, 0x10000000, 0x7, 0x6}, 0x7}}]}, {0x1d, 0x6, "46329d758983a5ba08d4fcc430fbde3330067dc5af6fb0b5f3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x98, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x6b, 0x6, "df796c0cdb12a97d24210ee77113e46a9bd70ec80db8b18bdb445b2e7f8fe07718e22f604983f35d9e8736d2b912d8c7afed5c69b56c3b85064e7d7ca1cda34d3fa3eebe6c23c191de2dccba0d3823bcbe39b854bfd8edf03e174c4facb8bf5fee7ff428e46871"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x9c, 0x3, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf8de, 0x10000, 0x4, 0x4, 0x1000}, 0x63}}]}, {0x4f, 0x6, "32508adbc21ed4f9ec1d32cb450463f8920457c3d581a1d4ec350c5e2c5f20a3fdacfa9c6f3ab4498f4afb4737fefd57308e519177729deb4b26af4ebce4442858134fc1999e8b6719e1b1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4100781f0807f7de, 0x2}}}}, @m_csum={0x13c, 0xb, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1f, 0x1, 0x1, 0xc906}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x3, 0x1}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xeb, 0x8, 0x5, 0x7, 0x1f}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x4ebc, 0x0, 0x401, 0x5}, 0x7f}}]}, {0xa0, 0x6, "f336703b99185ac5af204a6b5e86eb17f8f4bdc1c271b4d887ad7bef4789f3bcb943125f2ec6b533efaf636bdc74f14af3540012a8902de4ad8880fcea96258d3ca398ca7e57b6cb8194b3d80d0737080345cc5b550574b936df5f67246c6f511d517ac6e242b9e6943eeb990edc4ee12494c1e673f0896fbb0432b8751505b85b2664a8fe99aa1d49ca676cfabb2c0a3d2cda68485528db5c034726"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x80, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x58, 0x6, "29b841620940996f7198c17178c4f6ce2e92d73eda084faae278a81618cd8b3e7d7d1522610000477c782e2f78cf4df848b7c5c1fb2f604d47997313ae47f16775f91c00570c446f64ae8ff4b899c8d9b9b46230"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x84, 0x2, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xbe3}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x445c}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8000, 0x7, 0x7, 0xffffffe0, 0x7}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x96}]}, {0xf, 0x6, "0d325b96ee65e2da2bfae0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0xc8, 0x3f, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, 'SMC_PNETID\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff9, 0xffff, 0x6, 0x2, 0x720}}, @TCA_DEF_DATA={0xa, 0x3, ']^+^!\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0x6, 0x6, 0x4, 0xd127}}, @TCA_DEF_PARMS={0x18, 0x2, {0x22, 0x6, 0x3, 0x80000000, 0x8001}}, @TCA_DEF_DATA={0xf, 0x3, 'SMC_PNETID\x00'}]}, {0x25, 0x6, "97ad559c8afc38258a4e00c24a9abdf35b42f9d226981fb9eeb2a4fb3305516b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xa4, 0x12, 0x0, 0x0, {{0xf}, {0x6c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7fff}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x8448, 0x20000000, 0x13, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}]}, {0xb, 0x6, "6cd933d5510dcb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0xac, 0xc, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9c7, 0x5, 0x3, 0x9, 0x400}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x1ff, 0x40, 0x2, 0xfff}, {0x0, 0x8, 0xff, 0x1}, {0x0, 0x9, 0x3f, 0xde}, {0xfc8, 0x8, 0xd0, 0x80}, {0x101, 0x2, 0x40, 0x101}, {0x1, 0x1, 0x3, 0xfffffdbe}, {0x3f, 0x6, 0x7f, 0x3f}]}]}, {0x28, 0x6, "748a3af068cd2d732c0ed77a35cf93a30589123cb696809f03094346dcaab24ffae5dbfa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x4fb0}, 0x1, 0x0, 0x0, 0x81}, 0x800) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2514.073891][T24972] device 2583 entered promiscuous mode 19:22:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 1) [ 2514.177369][T24983] FAULT_INJECTION: forcing a failure. [ 2514.177369][T24983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2514.190683][T24983] CPU: 0 PID: 24983 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2514.199113][T24983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2514.209167][T24983] Call Trace: [ 2514.212438][T24983] [ 2514.215377][T24983] dump_stack_lvl+0xcd/0x134 [ 2514.219974][T24983] should_fail.cold+0x5/0xa [ 2514.224481][T24983] _copy_from_user+0x2c/0x180 [ 2514.229156][T24983] __copy_msghdr_from_user+0x91/0x4b0 [ 2514.234525][T24983] ? __ia32_sys_shutdown+0x70/0x70 [ 2514.239635][T24983] ? perf_trace_lock+0xeb/0x4d0 [ 2514.244511][T24983] ? mark_lock+0xef/0x17b0 [ 2514.248939][T24983] sendmsg_copy_msghdr+0xa1/0x160 [ 2514.253959][T24983] ? do_recvmmsg+0x6d0/0x6d0 [ 2514.258549][T24983] ? perf_trace_lock+0xeb/0x4d0 [ 2514.263393][T24983] ? lock_chain_count+0x20/0x20 [ 2514.268244][T24983] ? check_path.constprop.0+0x50/0x50 [ 2514.273636][T24983] ___sys_sendmsg+0xc6/0x170 [ 2514.278228][T24983] ? sendmsg_copy_msghdr+0x160/0x160 [ 2514.283514][T24983] ? __fget_files+0x21b/0x3e0 [ 2514.288192][T24983] ? lock_downgrade+0x6e0/0x6e0 [ 2514.293485][T24983] ? __fget_files+0x23d/0x3e0 [ 2514.298165][T24983] ? __fget_light+0xea/0x280 [ 2514.302755][T24983] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2514.309004][T24983] __sys_sendmsg+0xe5/0x1b0 [ 2514.313508][T24983] ? __sys_sendmsg_sock+0x30/0x30 [ 2514.318552][T24983] ? syscall_enter_from_user_mode+0x21/0x70 [ 2514.324443][T24983] do_syscall_64+0x35/0xb0 [ 2514.328858][T24983] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2514.334748][T24983] RIP: 0033:0x7f0a45f05ae9 [ 2514.339158][T24983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2514.358762][T24983] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2514.367168][T24983] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2514.375133][T24983] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2514.383092][T24983] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2514.391052][T24983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2514.399012][T24983] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2514.406992][T24983] [ 2514.573538][T24990] device 2584 entered promiscuous mode 19:22:25 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1ff", 0x2e}], 0x1}, 0x0) 19:22:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe2b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 2) 19:22:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}}, 0x40001044) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="0d57394d29e195260300000000000000a934143c887b7d2288e8ba24389b4b5f487b9209cd2f15f7d265944c", @ANYRES16=r2, @ANYBLOB="97f53c0100000000000000b8e208a94ee44a895ba5b30908"], 0x14}, 0x1, 0x0, 0x0, 0x28800}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xb602) 19:22:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa03}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2514.697103][T24997] FAULT_INJECTION: forcing a failure. [ 2514.697103][T24997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2514.710462][T24997] CPU: 0 PID: 24997 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2514.718903][T24997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2514.728971][T24997] Call Trace: [ 2514.732267][T24997] [ 2514.735207][T24997] dump_stack_lvl+0xcd/0x134 [ 2514.739822][T24997] should_fail.cold+0x5/0xa [ 2514.744355][T24997] _copy_from_user+0x2c/0x180 [ 2514.748294][T25000] device 1169 entered promiscuous mode [ 2514.749051][T24997] iovec_from_user+0x242/0x3c0 [ 2514.759345][T24997] __import_iovec+0x65/0x5c0 [ 2514.763966][T24997] import_iovec+0x10c/0x150 [ 2514.768497][T24997] sendmsg_copy_msghdr+0x12d/0x160 [ 2514.773629][T24997] ? do_recvmmsg+0x6d0/0x6d0 [ 2514.778243][T24997] ? perf_trace_lock+0xeb/0x4d0 [ 2514.783130][T24997] ? lock_chain_count+0x20/0x20 [ 2514.788042][T24997] ? check_path.constprop.0+0x50/0x50 [ 2514.793898][T24997] ___sys_sendmsg+0xc6/0x170 [ 2514.798516][T24997] ? sendmsg_copy_msghdr+0x160/0x160 [ 2514.803834][T24997] ? __fget_files+0x21b/0x3e0 [ 2514.808541][T24997] ? lock_downgrade+0x6e0/0x6e0 [ 2514.813437][T24997] ? __fget_files+0x23d/0x3e0 [ 2514.818151][T24997] ? __fget_light+0xea/0x280 [ 2514.822762][T24997] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2514.829038][T24997] __sys_sendmsg+0xe5/0x1b0 [ 2514.833579][T24997] ? __sys_sendmsg_sock+0x30/0x30 [ 2514.838634][T24997] ? syscall_enter_from_user_mode+0x21/0x70 [ 2514.844559][T24997] do_syscall_64+0x35/0xb0 [ 2514.848993][T24997] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2514.854911][T24997] RIP: 0033:0x7f0a45f05ae9 [ 2514.859344][T24997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2514.878974][T24997] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2514.886784][T25007] validate_nla: 12 callbacks suppressed 19:22:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8) syz_io_uring_setup(0x5461, &(0x7f00000000c0)={0x0, 0xec11, 0x1, 0x1, 0xd5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400c4404cc576979d3e0caaec489832e5a5364d5953902e3b2d9650062feeea820fdee96887e88af4748271394bd93e13b85e705d187b575ce1f879ec9ad890c6dd303864b712ce", @ANYRES16=r1, @ANYBLOB="0b070000100e0008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) [ 2514.886803][T25007] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2514.887403][T24997] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2514.887426][T24997] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2514.887443][T24997] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2514.887462][T24997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2514.887480][T24997] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2514.887518][T24997] 19:22:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 3) 19:22:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2514.960604][T25007] device 2585 entered promiscuous mode [ 2515.043451][T25015] FAULT_INJECTION: forcing a failure. [ 2515.043451][T25015] name failslab, interval 1, probability 0, space 0, times 0 [ 2515.056402][T25015] CPU: 0 PID: 25015 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2515.064848][T25015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2515.074912][T25015] Call Trace: [ 2515.078209][T25015] [ 2515.081150][T25015] dump_stack_lvl+0xcd/0x134 [ 2515.085765][T25015] should_fail.cold+0x5/0xa [ 2515.090392][T25015] should_failslab+0x5/0x10 [ 2515.095446][T25015] kmem_cache_alloc_node+0x65/0x3d0 [ 2515.100667][T25015] ? __alloc_skb+0x214/0x360 [ 2515.105280][T25015] __alloc_skb+0x214/0x360 [ 2515.109725][T25015] netlink_sendmsg+0x967/0xda0 [ 2515.114522][T25015] ? netlink_unicast+0x7d0/0x7d0 [ 2515.119490][T25015] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2515.125762][T25015] ? netlink_unicast+0x7d0/0x7d0 [ 2515.130720][T25015] sock_sendmsg+0xcf/0x120 [ 2515.135165][T25015] ____sys_sendmsg+0x6e8/0x810 [ 2515.139956][T25015] ? kernel_sendmsg+0x50/0x50 [ 2515.144667][T25015] ? do_recvmmsg+0x6d0/0x6d0 [ 2515.149285][T25015] ? perf_trace_lock+0xeb/0x4d0 [ 2515.154153][T25015] ? lock_chain_count+0x20/0x20 [ 2515.159038][T25015] ? check_path.constprop.0+0x50/0x50 [ 2515.164437][T25015] ___sys_sendmsg+0xf3/0x170 [ 2515.169057][T25015] ? sendmsg_copy_msghdr+0x160/0x160 [ 2515.174366][T25015] ? __fget_files+0x21b/0x3e0 [ 2515.179068][T25015] ? lock_downgrade+0x6e0/0x6e0 [ 2515.183956][T25015] ? __fget_files+0x23d/0x3e0 [ 2515.188666][T25015] ? __fget_light+0xea/0x280 [ 2515.193278][T25015] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2515.199553][T25015] __sys_sendmsg+0xe5/0x1b0 [ 2515.204072][T25015] ? __sys_sendmsg_sock+0x30/0x30 [ 2515.209130][T25015] ? syscall_enter_from_user_mode+0x21/0x70 [ 2515.215056][T25015] do_syscall_64+0x35/0xb0 [ 2515.219506][T25015] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2515.225682][T25015] RIP: 0033:0x7f0a45f05ae9 [ 2515.230113][T25015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2515.249740][T25015] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2515.258178][T25015] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2515.266166][T25015] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2515.274155][T25015] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2515.282149][T25015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 19:22:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe3b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xb800) [ 2515.290132][T25015] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2515.298162][T25015] 19:22:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe4020000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2515.367369][T25022] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2515.382078][T25022] device 1170 entered promiscuous mode [ 2515.604436][T25028] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2515.621315][T25028] device 2586 entered promiscuous mode 19:22:26 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x9}], 0x1}, 0x0) 19:22:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 4) 19:22:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc01}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0003270d7000fddbdf256c0000000c009900ff0100007c00000008002700690000000500180017000000"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) accept(r0, &(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000005c0)=0x80) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x48800800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x74, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x400088c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x917, 0xffffff9e, 0xfffffffe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1={0xff, 0x2}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x7c, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}]}, 0x7c}}, 0x8000) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="af0002000040000000000000000000", @ANYRES16=r6, @ANYBLOB="10002cbd7000fedbdf250200000014000200766c616e30000000000000000000000005000400010000000900010073797a30000000000500040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x80) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) 19:22:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xbe03) 19:22:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe4030000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2515.760974][T25039] FAULT_INJECTION: forcing a failure. [ 2515.760974][T25039] name failslab, interval 1, probability 0, space 0, times 0 [ 2515.774201][T25039] CPU: 0 PID: 25039 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2515.782639][T25039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2515.792709][T25039] Call Trace: [ 2515.796002][T25039] [ 2515.798951][T25039] dump_stack_lvl+0xcd/0x134 [ 2515.803567][T25039] should_fail.cold+0x5/0xa [ 2515.808106][T25039] should_failslab+0x5/0x10 [ 2515.812749][T25039] __kmalloc_node_track_caller+0x7d/0x340 [ 2515.818501][T25039] ? netlink_sendmsg+0x967/0xda0 [ 2515.823474][T25039] __alloc_skb+0xda/0x360 [ 2515.827833][T25039] netlink_sendmsg+0x967/0xda0 [ 2515.832634][T25039] ? netlink_unicast+0x7d0/0x7d0 [ 2515.837602][T25039] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2515.843873][T25039] ? netlink_unicast+0x7d0/0x7d0 [ 2515.848845][T25039] sock_sendmsg+0xcf/0x120 [ 2515.853316][T25039] ____sys_sendmsg+0x6e8/0x810 [ 2515.858112][T25039] ? kernel_sendmsg+0x50/0x50 [ 2515.862812][T25039] ? do_recvmmsg+0x6d0/0x6d0 [ 2515.867428][T25039] ? perf_trace_lock+0xeb/0x4d0 [ 2515.872299][T25039] ? lock_chain_count+0x20/0x20 [ 2515.877202][T25039] ? check_path.constprop.0+0x50/0x50 [ 2515.882605][T25039] ___sys_sendmsg+0xf3/0x170 [ 2515.887217][T25039] ? sendmsg_copy_msghdr+0x160/0x160 [ 2515.892530][T25039] ? __fget_files+0x21b/0x3e0 [ 2515.897233][T25039] ? lock_downgrade+0x6e0/0x6e0 [ 2515.902125][T25039] ? __fget_files+0x23d/0x3e0 [ 2515.906832][T25039] ? __fget_light+0xea/0x280 [ 2515.911449][T25039] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2515.917725][T25039] __sys_sendmsg+0xe5/0x1b0 [ 2515.922245][T25039] ? __sys_sendmsg_sock+0x30/0x30 [ 2515.927308][T25039] ? syscall_enter_from_user_mode+0x21/0x70 [ 2515.933231][T25039] do_syscall_64+0x35/0xb0 [ 2515.937668][T25039] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2515.943579][T25039] RIP: 0033:0x7f0a45f05ae9 [ 2515.948007][T25039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2515.967635][T25039] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2515.976068][T25039] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2515.984057][T25039] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2515.992046][T25039] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2516.000379][T25039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 19:22:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe4170000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xc203) 19:22:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, &(0x7f00000000c0)=""/83, 0x53, 0x0) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r5}, &(0x7f00000000c0)=""/83, 0x53, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x57, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r5], 0x14}, 0x1, 0x0, 0x0, 0x2400c845}, 0x400c010) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) [ 2516.008392][T25039] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2516.016402][T25039] 19:22:27 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0xa}], 0x1}, 0x0) 19:22:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 5) [ 2516.166296][T25057] FAULT_INJECTION: forcing a failure. [ 2516.166296][T25057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2516.179647][T25057] CPU: 0 PID: 25057 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2516.188088][T25057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2516.198160][T25057] Call Trace: [ 2516.201448][T25057] [ 2516.204390][T25057] dump_stack_lvl+0xcd/0x134 [ 2516.209005][T25057] should_fail.cold+0x5/0xa [ 2516.213540][T25057] _copy_from_iter+0x389/0x1320 [ 2516.218428][T25057] ? hash_and_copy_to_iter+0x200/0x200 [ 2516.223912][T25057] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2516.229484][T25057] ? memset+0x20/0x40 [ 2516.233495][T25057] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2516.239759][T25057] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2516.246026][T25057] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2516.252289][T25057] ? __phys_addr+0xc4/0x140 [ 2516.256861][T25057] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2516.263124][T25057] ? __phys_addr_symbol+0x2c/0x70 [ 2516.268173][T25057] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2516.273917][T25057] ? __check_object_size+0x16e/0x3f0 [ 2516.279229][T25057] netlink_sendmsg+0x7d5/0xda0 [ 2516.284026][T25057] ? netlink_unicast+0x7d0/0x7d0 [ 2516.288993][T25057] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2516.295265][T25057] ? netlink_unicast+0x7d0/0x7d0 [ 2516.300232][T25057] sock_sendmsg+0xcf/0x120 [ 2516.304675][T25057] ____sys_sendmsg+0x6e8/0x810 [ 2516.309467][T25057] ? kernel_sendmsg+0x50/0x50 [ 2516.314166][T25057] ? do_recvmmsg+0x6d0/0x6d0 [ 2516.318777][T25057] ? perf_trace_lock+0xeb/0x4d0 [ 2516.323647][T25057] ? lock_chain_count+0x20/0x20 [ 2516.328521][T25057] ? check_path.constprop.0+0x50/0x50 [ 2516.333896][T25057] ___sys_sendmsg+0xf3/0x170 [ 2516.338574][T25057] ? sendmsg_copy_msghdr+0x160/0x160 [ 2516.343859][T25057] ? __fget_files+0x21b/0x3e0 [ 2516.348542][T25057] ? lock_downgrade+0x6e0/0x6e0 [ 2516.353409][T25057] ? __fget_files+0x23d/0x3e0 [ 2516.358103][T25057] ? __fget_light+0xea/0x280 [ 2516.362699][T25057] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2516.368948][T25057] __sys_sendmsg+0xe5/0x1b0 [ 2516.373451][T25057] ? __sys_sendmsg_sock+0x30/0x30 [ 2516.378487][T25057] ? syscall_enter_from_user_mode+0x21/0x70 [ 2516.384384][T25057] do_syscall_64+0x35/0xb0 [ 2516.388802][T25057] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2516.394697][T25057] RIP: 0033:0x7f0a45f05ae9 [ 2516.399110][T25057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2516.418718][T25057] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2516.427132][T25057] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2516.435096][T25057] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2516.443061][T25057] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2516.451025][T25057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2516.458991][T25057] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 19:22:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000b40)={0x5a, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c8020000", @ANYRES16=r3, @ANYBLOB="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"], 0x2c8}, 0x1, 0x0, 0x0, 0x40091}, 0x1) [ 2516.466971][T25057] 19:22:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe4b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xc403) 19:22:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 6) [ 2516.589463][T25066] FAULT_INJECTION: forcing a failure. [ 2516.589463][T25066] name failslab, interval 1, probability 0, space 0, times 0 [ 2516.602470][T25066] CPU: 0 PID: 25066 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2516.610910][T25066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2516.620977][T25066] Call Trace: [ 2516.624264][T25066] [ 2516.627206][T25066] dump_stack_lvl+0xcd/0x134 [ 2516.631911][T25066] should_fail.cold+0x5/0xa [ 2516.636444][T25066] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 2516.643763][T25066] should_failslab+0x5/0x10 [ 2516.648305][T25066] __kmalloc+0x72/0x320 [ 2516.652493][T25066] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 2516.659645][T25066] genl_family_rcv_msg_doit+0xda/0x320 [ 2516.665135][T25066] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2516.672533][T25066] ? mutex_lock_io_nested+0x1150/0x1150 [ 2516.678106][T25066] ? __lock_acquire+0x162f/0x54a0 [ 2516.683169][T25066] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2516.689439][T25066] ? __radix_tree_lookup+0x211/0x2a0 [ 2516.694763][T25066] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2516.701041][T25066] ? genl_get_cmd+0x3cf/0x480 [ 2516.705751][T25066] genl_rcv_msg+0x328/0x580 [ 2516.710290][T25066] ? genl_get_cmd+0x480/0x480 [ 2516.714994][T25066] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2516.721265][T25066] ? lock_release+0x720/0x720 [ 2516.725966][T25066] ? check_path.constprop.0+0x50/0x50 [ 2516.731374][T25066] netlink_rcv_skb+0x153/0x420 [ 2516.736174][T25066] ? genl_get_cmd+0x480/0x480 [ 2516.740921][T25066] ? netlink_ack+0xa60/0xa60 [ 2516.745550][T25066] ? netlink_deliver_tap+0x1b1/0xc30 [ 2516.750860][T25066] ? _copy_from_iter+0x12b/0x1320 [ 2516.755919][T25066] genl_rcv+0x24/0x40 [ 2516.759927][T25066] netlink_unicast+0x533/0x7d0 [ 2516.764728][T25066] ? netlink_attachskb+0x880/0x880 [ 2516.769863][T25066] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2516.776132][T25066] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2516.782485][T25066] ? __phys_addr_symbol+0x2c/0x70 [ 2516.787532][T25066] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2516.793631][T25066] ? __check_object_size+0x16e/0x3f0 [ 2516.798946][T25066] netlink_sendmsg+0x86d/0xda0 [ 2516.803754][T25066] ? netlink_unicast+0x7d0/0x7d0 [ 2516.808727][T25066] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2516.814994][T25066] ? netlink_unicast+0x7d0/0x7d0 [ 2516.819960][T25066] sock_sendmsg+0xcf/0x120 [ 2516.824402][T25066] ____sys_sendmsg+0x6e8/0x810 [ 2516.829231][T25066] ? kernel_sendmsg+0x50/0x50 [ 2516.833937][T25066] ? do_recvmmsg+0x6d0/0x6d0 [ 2516.838556][T25066] ? perf_trace_lock+0xeb/0x4d0 [ 2516.843423][T25066] ? lock_chain_count+0x20/0x20 [ 2516.848303][T25066] ? check_path.constprop.0+0x50/0x50 [ 2516.853725][T25066] ___sys_sendmsg+0xf3/0x170 [ 2516.858510][T25066] ? sendmsg_copy_msghdr+0x160/0x160 [ 2516.863823][T25066] ? __fget_files+0x21b/0x3e0 [ 2516.868520][T25066] ? lock_downgrade+0x6e0/0x6e0 [ 2516.873411][T25066] ? __fget_files+0x23d/0x3e0 [ 2516.878119][T25066] ? __fget_light+0xea/0x280 [ 2516.882733][T25066] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2516.889013][T25066] __sys_sendmsg+0xe5/0x1b0 [ 2516.893548][T25066] ? __sys_sendmsg_sock+0x30/0x30 [ 2516.898615][T25066] ? syscall_enter_from_user_mode+0x21/0x70 [ 2516.904540][T25066] do_syscall_64+0x35/0xb0 [ 2516.908980][T25066] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2516.914896][T25066] RIP: 0033:0x7f0a45f05ae9 [ 2516.919326][T25066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:22:27 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0xf}], 0x1}, 0x0) 19:22:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe4ffffff}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xc803) 19:22:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="744b8533", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) [ 2516.939056][T25066] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2516.947491][T25066] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2516.955476][T25066] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2516.963461][T25066] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2516.971450][T25066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2516.979445][T25066] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2516.987539][T25066] 19:22:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 7) [ 2517.112752][T25086] FAULT_INJECTION: forcing a failure. [ 2517.112752][T25086] name failslab, interval 1, probability 0, space 0, times 0 [ 2517.125786][T25086] CPU: 0 PID: 25086 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2517.134227][T25086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2517.144303][T25086] Call Trace: [ 2517.147590][T25086] [ 2517.150534][T25086] dump_stack_lvl+0xcd/0x134 [ 2517.155152][T25086] should_fail.cold+0x5/0xa [ 2517.159687][T25086] ? tipc_aead_init.constprop.0+0x55/0x8f0 [ 2517.165518][T25086] should_failslab+0x5/0x10 [ 2517.170054][T25086] kmem_cache_alloc_trace+0x55/0x2b0 [ 2517.175458][T25086] tipc_aead_init.constprop.0+0x55/0x8f0 [ 2517.181120][T25086] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2517.187477][T25086] ? __crypto_alg_lookup+0x2ad/0x310 [ 2517.192866][T25086] tipc_crypto_key_init+0x82/0x110 [ 2517.198006][T25086] ? tipc_ehdr_validate+0x240/0x240 [ 2517.203228][T25086] ? crypto_mod_put+0x8c/0x100 [ 2517.208018][T25086] tipc_nl_node_set_key+0xa5d/0xf70 [ 2517.213242][T25086] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2517.219522][T25086] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2517.225791][T25086] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2517.233191][T25086] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2517.240518][T25086] genl_family_rcv_msg_doit+0x228/0x320 [ 2517.246092][T25086] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2517.253491][T25086] ? mutex_lock_io_nested+0x1150/0x1150 [ 2517.259081][T25086] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2517.265348][T25086] ? __radix_tree_lookup+0x211/0x2a0 [ 2517.270654][T25086] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2517.276922][T25086] ? genl_get_cmd+0x3cf/0x480 [ 2517.281626][T25086] genl_rcv_msg+0x328/0x580 [ 2517.286155][T25086] ? genl_get_cmd+0x480/0x480 [ 2517.290860][T25086] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2517.297132][T25086] ? lock_release+0x720/0x720 [ 2517.301827][T25086] ? check_path.constprop.0+0x50/0x50 [ 2517.307229][T25086] netlink_rcv_skb+0x153/0x420 [ 2517.312018][T25086] ? genl_get_cmd+0x480/0x480 [ 2517.316722][T25086] ? netlink_ack+0xa60/0xa60 [ 2517.321351][T25086] ? netlink_deliver_tap+0x1b1/0xc30 [ 2517.326658][T25086] ? _copy_from_iter+0x12b/0x1320 [ 2517.331716][T25086] genl_rcv+0x24/0x40 [ 2517.335725][T25086] netlink_unicast+0x533/0x7d0 [ 2517.340523][T25086] ? netlink_attachskb+0x880/0x880 [ 2517.345655][T25086] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2517.351922][T25086] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2517.358186][T25086] ? __phys_addr_symbol+0x2c/0x70 [ 2517.363222][T25086] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2517.368965][T25086] ? __check_object_size+0x16e/0x3f0 [ 2517.374281][T25086] netlink_sendmsg+0x86d/0xda0 [ 2517.379073][T25086] ? netlink_unicast+0x7d0/0x7d0 [ 2517.384039][T25086] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2517.390304][T25086] ? netlink_unicast+0x7d0/0x7d0 [ 2517.395272][T25086] sock_sendmsg+0xcf/0x120 [ 2517.399722][T25086] ____sys_sendmsg+0x6e8/0x810 [ 2517.404527][T25086] ? kernel_sendmsg+0x50/0x50 [ 2517.409229][T25086] ? do_recvmmsg+0x6d0/0x6d0 [ 2517.413840][T25086] ? perf_trace_lock+0xeb/0x4d0 [ 2517.418708][T25086] ? lock_chain_count+0x20/0x20 [ 2517.423595][T25086] ? check_path.constprop.0+0x50/0x50 [ 2517.429000][T25086] ___sys_sendmsg+0xf3/0x170 [ 2517.433613][T25086] ? sendmsg_copy_msghdr+0x160/0x160 [ 2517.438927][T25086] ? __fget_files+0x21b/0x3e0 [ 2517.440378][T25096] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2517.443621][T25086] ? lock_downgrade+0x6e0/0x6e0 [ 2517.443674][T25086] ? __fget_files+0x23d/0x3e0 [ 2517.443716][T25086] ? __fget_light+0xea/0x280 [ 2517.465883][T25086] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2517.472159][T25086] __sys_sendmsg+0xe5/0x1b0 [ 2517.476684][T25086] ? __sys_sendmsg_sock+0x30/0x30 [ 2517.481757][T25086] ? syscall_enter_from_user_mode+0x21/0x70 [ 2517.487679][T25086] do_syscall_64+0x35/0xb0 [ 2517.492127][T25086] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2517.498046][T25086] RIP: 0033:0x7f0a45f05ae9 [ 2517.502478][T25086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2517.522104][T25086] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2517.530539][T25086] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2517.538532][T25086] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2517.546516][T25086] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2517.554501][T25086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 19:22:28 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x18}], 0x1}, 0x0) 19:22:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe5b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xca02) 19:22:28 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x25}], 0x1}, 0x0) [ 2517.562479][T25086] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2517.570484][T25086] [ 2517.585676][T25096] device 1171 entered promiscuous mode 19:22:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x100}, 0x4000800) 19:22:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 8) 19:22:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1e5b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2517.771964][T25108] FAULT_INJECTION: forcing a failure. [ 2517.771964][T25108] name failslab, interval 1, probability 0, space 0, times 0 [ 2517.785115][T25108] CPU: 0 PID: 25108 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2517.793552][T25108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2517.803650][T25108] Call Trace: [ 2517.806943][T25108] [ 2517.809885][T25108] dump_stack_lvl+0xcd/0x134 [ 2517.814505][T25108] should_fail.cold+0x5/0xa [ 2517.819041][T25108] ? crypto_create_tfm_node+0x7f/0x320 [ 2517.824520][T25108] should_failslab+0x5/0x10 [ 2517.829044][T25108] __kmalloc_node+0x75/0x370 [ 2517.833665][T25108] crypto_create_tfm_node+0x7f/0x320 [ 2517.838978][T25108] crypto_alloc_tfm_node+0x107/0x260 [ 2517.844305][T25108] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2517.850139][T25108] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2517.856421][T25108] tipc_crypto_key_init+0x82/0x110 [ 2517.861565][T25108] ? tipc_ehdr_validate+0x240/0x240 [ 2517.866787][T25108] ? crypto_mod_put+0x8c/0x100 [ 2517.871595][T25108] tipc_nl_node_set_key+0xa5d/0xf70 [ 2517.876821][T25108] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2517.883102][T25108] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2517.889370][T25108] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2517.896768][T25108] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2517.904093][T25108] genl_family_rcv_msg_doit+0x228/0x320 [ 2517.909666][T25108] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2517.917068][T25108] ? mutex_lock_io_nested+0x1150/0x1150 [ 2517.922652][T25108] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2517.928922][T25108] ? __radix_tree_lookup+0x211/0x2a0 [ 2517.934228][T25108] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2517.940502][T25108] ? genl_get_cmd+0x3cf/0x480 [ 2517.945199][T25108] genl_rcv_msg+0x328/0x580 [ 2517.949741][T25108] ? genl_get_cmd+0x480/0x480 [ 2517.954440][T25108] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2517.960708][T25108] ? lock_release+0x720/0x720 [ 2517.965406][T25108] ? check_path.constprop.0+0x50/0x50 [ 2517.970807][T25108] netlink_rcv_skb+0x153/0x420 [ 2517.975596][T25108] ? genl_get_cmd+0x480/0x480 [ 2517.980299][T25108] ? netlink_ack+0xa60/0xa60 [ 2517.984927][T25108] ? netlink_deliver_tap+0x1b1/0xc30 [ 2517.990218][T25108] ? _copy_from_iter+0x12b/0x1320 [ 2517.995260][T25108] genl_rcv+0x24/0x40 [ 2517.999248][T25108] netlink_unicast+0x533/0x7d0 [ 2518.004018][T25108] ? netlink_attachskb+0x880/0x880 [ 2518.009132][T25108] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2518.015378][T25108] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2518.021636][T25108] ? __phys_addr_symbol+0x2c/0x70 [ 2518.026660][T25108] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2518.032379][T25108] ? __check_object_size+0x16e/0x3f0 [ 2518.037847][T25108] netlink_sendmsg+0x86d/0xda0 [ 2518.042732][T25108] ? netlink_unicast+0x7d0/0x7d0 [ 2518.047676][T25108] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2518.053937][T25108] ? netlink_unicast+0x7d0/0x7d0 [ 2518.058881][T25108] sock_sendmsg+0xcf/0x120 [ 2518.063315][T25108] ____sys_sendmsg+0x6e8/0x810 [ 2518.068087][T25108] ? kernel_sendmsg+0x50/0x50 [ 2518.072776][T25108] ? do_recvmmsg+0x6d0/0x6d0 [ 2518.077366][T25108] ? perf_trace_lock+0xeb/0x4d0 [ 2518.082236][T25108] ? lock_chain_count+0x20/0x20 [ 2518.087090][T25108] ? check_path.constprop.0+0x50/0x50 [ 2518.092466][T25108] ___sys_sendmsg+0xf3/0x170 [ 2518.097054][T25108] ? sendmsg_copy_msghdr+0x160/0x160 [ 2518.102340][T25108] ? __fget_files+0x21b/0x3e0 [ 2518.107045][T25108] ? lock_downgrade+0x6e0/0x6e0 [ 2518.111907][T25108] ? __fget_files+0x23d/0x3e0 [ 2518.116591][T25108] ? __fget_light+0xea/0x280 [ 2518.121186][T25108] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2518.127440][T25108] __sys_sendmsg+0xe5/0x1b0 [ 2518.131941][T25108] ? __sys_sendmsg_sock+0x30/0x30 [ 2518.136976][T25108] ? syscall_enter_from_user_mode+0x21/0x70 [ 2518.142886][T25108] do_syscall_64+0x35/0xb0 [ 2518.147310][T25108] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2518.153205][T25108] RIP: 0033:0x7f0a45f05ae9 [ 2518.157625][T25108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2518.177232][T25108] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2518.185640][T25108] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2518.193607][T25108] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2518.201573][T25108] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2518.209537][T25108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 19:22:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe6030000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:29 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x5a}], 0x1}, 0x0) 19:22:29 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xce03) [ 2518.217500][T25108] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2518.225488][T25108] 19:22:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r6}, &(0x7f00000000c0)=""/83, 0x53, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYRESOCT=r6], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 9) [ 2518.373261][T25121] FAULT_INJECTION: forcing a failure. [ 2518.373261][T25121] name failslab, interval 1, probability 0, space 0, times 0 [ 2518.383509][T25118] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2518.385997][T25121] CPU: 0 PID: 25121 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2518.402482][T25121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2518.412553][T25121] Call Trace: [ 2518.415837][T25121] [ 2518.418777][T25121] dump_stack_lvl+0xcd/0x134 [ 2518.423389][T25121] should_fail.cold+0x5/0xa [ 2518.427928][T25121] ? crypto_create_tfm_node+0x7f/0x320 [ 2518.433403][T25121] should_failslab+0x5/0x10 [ 2518.437926][T25121] __kmalloc_node+0x75/0x370 [ 2518.442545][T25121] crypto_create_tfm_node+0x7f/0x320 [ 2518.447858][T25121] crypto_alloc_tfm_node+0x107/0x260 [ 2518.453170][T25121] cryptd_alloc_aead+0x101/0x200 [ 2518.458225][T25121] ? cryptd_alloc_ahash+0x200/0x200 [ 2518.463456][T25121] ? __kmalloc_node+0x62/0x370 [ 2518.468260][T25121] simd_aead_init+0x67/0x1b0 [ 2518.472935][T25121] ? simd_aead_exit+0x40/0x40 [ 2518.477626][T25121] crypto_aead_init_tfm+0x138/0x1a0 [ 2518.482849][T25121] crypto_create_tfm_node+0x10d/0x320 [ 2518.488253][T25121] crypto_alloc_tfm_node+0x107/0x260 [ 2518.493566][T25121] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2518.499313][T25121] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2518.505591][T25121] tipc_crypto_key_init+0x82/0x110 [ 2518.510728][T25121] ? tipc_ehdr_validate+0x240/0x240 [ 2518.515948][T25121] ? crypto_mod_put+0x8c/0x100 [ 2518.520744][T25121] tipc_nl_node_set_key+0xa5d/0xf70 [ 2518.525973][T25121] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2518.532257][T25121] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2518.538527][T25121] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2518.545924][T25121] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2518.553240][T25121] genl_family_rcv_msg_doit+0x228/0x320 [ 2518.558819][T25121] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2518.566227][T25121] ? mutex_lock_io_nested+0x1150/0x1150 [ 2518.571809][T25121] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2518.578073][T25121] ? __radix_tree_lookup+0x211/0x2a0 [ 2518.583381][T25121] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2518.589642][T25121] ? genl_get_cmd+0x3cf/0x480 [ 2518.594343][T25121] genl_rcv_msg+0x328/0x580 [ 2518.598876][T25121] ? genl_get_cmd+0x480/0x480 [ 2518.603581][T25121] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2518.609853][T25121] ? lock_release+0x720/0x720 [ 2518.614552][T25121] ? check_path.constprop.0+0x50/0x50 [ 2518.619954][T25121] netlink_rcv_skb+0x153/0x420 [ 2518.624741][T25121] ? genl_get_cmd+0x480/0x480 [ 2518.629445][T25121] ? netlink_ack+0xa60/0xa60 [ 2518.634073][T25121] ? netlink_deliver_tap+0x1b1/0xc30 [ 2518.639380][T25121] ? _copy_from_iter+0x12b/0x1320 [ 2518.644438][T25121] genl_rcv+0x24/0x40 [ 2518.648456][T25121] netlink_unicast+0x533/0x7d0 [ 2518.653255][T25121] ? netlink_attachskb+0x880/0x880 [ 2518.658389][T25121] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2518.664658][T25121] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2518.670963][T25121] ? __phys_addr_symbol+0x2c/0x70 [ 2518.676010][T25121] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2518.681772][T25121] ? __check_object_size+0x16e/0x3f0 [ 2518.687084][T25121] netlink_sendmsg+0x86d/0xda0 [ 2518.691884][T25121] ? netlink_unicast+0x7d0/0x7d0 [ 2518.696857][T25121] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2518.703125][T25121] ? netlink_unicast+0x7d0/0x7d0 [ 2518.708091][T25121] sock_sendmsg+0xcf/0x120 [ 2518.712539][T25121] ____sys_sendmsg+0x6e8/0x810 [ 2518.717339][T25121] ? kernel_sendmsg+0x50/0x50 [ 2518.722040][T25121] ? do_recvmmsg+0x6d0/0x6d0 [ 2518.726658][T25121] ? perf_trace_lock+0xeb/0x4d0 [ 2518.731535][T25121] ? lock_chain_count+0x20/0x20 [ 2518.736518][T25121] ? check_path.constprop.0+0x50/0x50 [ 2518.741925][T25121] ___sys_sendmsg+0xf3/0x170 [ 2518.746542][T25121] ? sendmsg_copy_msghdr+0x160/0x160 [ 2518.751859][T25121] ? __fget_files+0x21b/0x3e0 [ 2518.756562][T25121] ? lock_downgrade+0x6e0/0x6e0 [ 2518.761457][T25121] ? __fget_files+0x23d/0x3e0 [ 2518.766173][T25121] ? __fget_light+0xea/0x280 [ 2518.770799][T25121] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2518.777103][T25121] __sys_sendmsg+0xe5/0x1b0 [ 2518.781634][T25121] ? __sys_sendmsg_sock+0x30/0x30 [ 2518.786705][T25121] ? syscall_enter_from_user_mode+0x21/0x70 [ 2518.792624][T25121] do_syscall_64+0x35/0xb0 [ 2518.797067][T25121] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2518.802983][T25121] RIP: 0033:0x7f0a45f05ae9 [ 2518.807434][T25121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2518.827272][T25121] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2518.835713][T25121] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2518.843705][T25121] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2518.851697][T25121] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2518.859684][T25121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2518.867672][T25121] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 19:22:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe6b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:29 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xd203) [ 2518.875680][T25121] 19:22:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="45444b8044a6a2a8b4639fa3405ecf18670e1424c92e3ee80700b4a735eb65ad33c1bebb44adbf521b9b306cdc80977ff19aa3997f59420de5d94e7a3f4fac62b9a9e897a8e4ad49264f3c16a0400600f01969848d7fed657c72caa43543de80d9d5354afdaf96415841453b3f9810515d29879364e8ae7fa1ee20bed1372e9bc410d42871138851b4664fb9a1b0143d2b7cc544e3ec09c6002392bc07dd3c7f75db08601376c10ef5e1f12aa9e49b3f6e38dfb1f9155724e891c639b09c1438ff2156def69ac67d6fd282dea35726e0567800e56d32f7ae7259fcfeb622dd96dbc897316b970c77c8d2ab"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x138, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xc0, @private0, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5e0}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 10) [ 2518.896277][T25118] device 2587 entered promiscuous mode 19:22:30 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xd403) [ 2518.988777][T25136] FAULT_INJECTION: forcing a failure. [ 2518.988777][T25136] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.001990][T25136] CPU: 0 PID: 25136 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2519.010429][T25136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2519.020502][T25136] Call Trace: [ 2519.023787][T25136] [ 2519.026730][T25136] dump_stack_lvl+0xcd/0x134 [ 2519.031347][T25136] should_fail.cold+0x5/0xa [ 2519.035879][T25136] ? crypto_create_tfm_node+0x7f/0x320 [ 2519.041360][T25136] should_failslab+0x5/0x10 [ 2519.045883][T25136] __kmalloc_node+0x75/0x370 [ 2519.050506][T25136] crypto_create_tfm_node+0x7f/0x320 [ 2519.055816][T25136] crypto_spawn_tfm2+0x60/0xb0 [ 2519.060600][T25136] ? cryptd_hash_init_tfm+0x120/0x120 [ 2519.065996][T25136] cryptd_aead_init_tfm+0x3c/0x140 [ 2519.071129][T25136] ? cryptd_hash_init_tfm+0x120/0x120 [ 2519.076536][T25136] crypto_aead_init_tfm+0x138/0x1a0 [ 2519.081762][T25136] crypto_create_tfm_node+0x10d/0x320 [ 2519.087164][T25136] crypto_alloc_tfm_node+0x107/0x260 [ 2519.092626][T25136] cryptd_alloc_aead+0x101/0x200 [ 2519.097592][T25136] ? cryptd_alloc_ahash+0x200/0x200 [ 2519.102922][T25136] ? __kmalloc_node+0x62/0x370 [ 2519.107728][T25136] simd_aead_init+0x67/0x1b0 [ 2519.112337][T25136] ? simd_aead_exit+0x40/0x40 [ 2519.117034][T25136] crypto_aead_init_tfm+0x138/0x1a0 [ 2519.122257][T25136] crypto_create_tfm_node+0x10d/0x320 [ 2519.127656][T25136] crypto_alloc_tfm_node+0x107/0x260 [ 2519.132972][T25136] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2519.138714][T25136] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2519.144989][T25136] tipc_crypto_key_init+0x82/0x110 [ 2519.150124][T25136] ? tipc_ehdr_validate+0x240/0x240 [ 2519.155354][T25136] ? crypto_mod_put+0x8c/0x100 [ 2519.160155][T25136] tipc_nl_node_set_key+0xa5d/0xf70 [ 2519.160274][T25138] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2519.165377][T25136] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2519.165422][T25136] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2519.185921][T25136] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2519.193496][T25136] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2519.200816][T25136] genl_family_rcv_msg_doit+0x228/0x320 [ 2519.206393][T25136] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2519.213786][T25136] ? mutex_lock_io_nested+0x1150/0x1150 [ 2519.219371][T25136] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2519.225636][T25136] ? __radix_tree_lookup+0x211/0x2a0 [ 2519.230940][T25136] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2519.237204][T25136] ? genl_get_cmd+0x3cf/0x480 [ 2519.241908][T25136] genl_rcv_msg+0x328/0x580 [ 2519.246437][T25136] ? genl_get_cmd+0x480/0x480 [ 2519.251141][T25136] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2519.257414][T25136] ? lock_release+0x720/0x720 [ 2519.262113][T25136] ? check_path.constprop.0+0x50/0x50 [ 2519.267514][T25136] netlink_rcv_skb+0x153/0x420 [ 2519.272307][T25136] ? genl_get_cmd+0x480/0x480 [ 2519.277014][T25136] ? netlink_ack+0xa60/0xa60 [ 2519.281638][T25136] ? netlink_deliver_tap+0x1b1/0xc30 [ 2519.286948][T25136] ? _copy_from_iter+0x12b/0x1320 [ 2519.292004][T25136] genl_rcv+0x24/0x40 [ 2519.296007][T25136] netlink_unicast+0x533/0x7d0 [ 2519.300798][T25136] ? netlink_attachskb+0x880/0x880 [ 2519.305935][T25136] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2519.312204][T25136] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2519.318470][T25136] ? __phys_addr_symbol+0x2c/0x70 [ 2519.323515][T25136] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2519.329259][T25136] ? __check_object_size+0x16e/0x3f0 [ 2519.334571][T25136] netlink_sendmsg+0x86d/0xda0 [ 2519.339365][T25136] ? netlink_unicast+0x7d0/0x7d0 [ 2519.344335][T25136] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2519.350602][T25136] ? netlink_unicast+0x7d0/0x7d0 [ 2519.355563][T25136] sock_sendmsg+0xcf/0x120 [ 2519.360021][T25136] ____sys_sendmsg+0x6e8/0x810 [ 2519.364815][T25136] ? kernel_sendmsg+0x50/0x50 [ 2519.369514][T25136] ? do_recvmmsg+0x6d0/0x6d0 [ 2519.374139][T25136] ? perf_trace_lock+0xeb/0x4d0 [ 2519.379007][T25136] ? lock_chain_count+0x20/0x20 [ 2519.383885][T25136] ? check_path.constprop.0+0x50/0x50 [ 2519.389282][T25136] ___sys_sendmsg+0xf3/0x170 [ 2519.393892][T25136] ? sendmsg_copy_msghdr+0x160/0x160 [ 2519.399205][T25136] ? __fget_files+0x21b/0x3e0 [ 2519.403906][T25136] ? lock_downgrade+0x6e0/0x6e0 [ 2519.408795][T25136] ? __fget_files+0x23d/0x3e0 [ 2519.413508][T25136] ? __fget_light+0xea/0x280 [ 2519.418130][T25136] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2519.424405][T25136] __sys_sendmsg+0xe5/0x1b0 [ 2519.428931][T25136] ? __sys_sendmsg_sock+0x30/0x30 [ 2519.433993][T25136] ? syscall_enter_from_user_mode+0x21/0x70 [ 2519.439921][T25136] do_syscall_64+0x35/0xb0 [ 2519.444359][T25136] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2519.450258][T25136] RIP: 0033:0x7f0a45f05ae9 [ 2519.454689][T25136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2519.474315][T25136] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2519.482750][T25136] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 19:22:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe7b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2519.490743][T25136] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2519.498730][T25136] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2519.506719][T25136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2519.514701][T25136] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2519.522704][T25136] [ 2519.542775][T25138] device 2588 entered promiscuous mode 19:22:30 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x63}], 0x1}, 0x0) 19:22:30 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xd601) 19:22:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x8804) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 11) 19:22:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe8b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2201}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2519.797210][T25153] FAULT_INJECTION: forcing a failure. [ 2519.797210][T25153] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.809980][T25153] CPU: 0 PID: 25153 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2519.818420][T25153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2519.828487][T25153] Call Trace: [ 2519.831780][T25153] [ 2519.834722][T25153] dump_stack_lvl+0xcd/0x134 [ 2519.839334][T25153] should_fail.cold+0x5/0xa [ 2519.843978][T25153] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2519.849902][T25153] should_failslab+0x5/0x10 [ 2519.854429][T25153] kmem_cache_alloc_trace+0x55/0x2b0 [ 2519.859739][T25153] ? crypto_aead_setkey+0x10f/0x290 [ 2519.864973][T25153] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2519.870732][T25153] tipc_crypto_key_init+0x82/0x110 [ 2519.875868][T25153] ? tipc_ehdr_validate+0x240/0x240 [ 2519.881091][T25153] ? crypto_mod_put+0x8c/0x100 [ 2519.885930][T25153] tipc_nl_node_set_key+0xa5d/0xf70 [ 2519.891165][T25153] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2519.897446][T25153] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2519.903712][T25153] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2519.911116][T25153] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2519.918436][T25153] genl_family_rcv_msg_doit+0x228/0x320 [ 2519.924012][T25153] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2519.931413][T25153] ? mutex_lock_io_nested+0x1150/0x1150 [ 2519.931810][T25160] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2519.937025][T25153] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2519.937066][T25153] ? __radix_tree_lookup+0x211/0x2a0 [ 2519.937098][T25153] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2519.937124][T25153] ? genl_get_cmd+0x3cf/0x480 [ 2519.937164][T25153] genl_rcv_msg+0x328/0x580 [ 2519.937200][T25153] ? genl_get_cmd+0x480/0x480 [ 2519.976818][T25153] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2519.983093][T25153] ? lock_release+0x720/0x720 [ 2519.987796][T25153] ? check_path.constprop.0+0x50/0x50 [ 2519.993198][T25153] netlink_rcv_skb+0x153/0x420 [ 2519.997992][T25153] ? genl_get_cmd+0x480/0x480 [ 2520.002698][T25153] ? netlink_ack+0xa60/0xa60 [ 2520.007319][T25153] ? netlink_deliver_tap+0x1b1/0xc30 [ 2520.012628][T25153] ? _copy_from_iter+0x12b/0x1320 [ 2520.017687][T25153] genl_rcv+0x24/0x40 [ 2520.021694][T25153] netlink_unicast+0x533/0x7d0 [ 2520.026495][T25153] ? netlink_attachskb+0x880/0x880 [ 2520.031624][T25153] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2520.037892][T25153] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2520.044160][T25153] ? __phys_addr_symbol+0x2c/0x70 [ 2520.049206][T25153] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2520.054953][T25153] ? __check_object_size+0x16e/0x3f0 [ 2520.060268][T25153] netlink_sendmsg+0x86d/0xda0 [ 2520.065064][T25153] ? netlink_unicast+0x7d0/0x7d0 [ 2520.070029][T25153] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2520.076298][T25153] ? netlink_unicast+0x7d0/0x7d0 [ 2520.081263][T25153] sock_sendmsg+0xcf/0x120 [ 2520.085713][T25153] ____sys_sendmsg+0x6e8/0x810 [ 2520.090512][T25153] ? kernel_sendmsg+0x50/0x50 [ 2520.095212][T25153] ? do_recvmmsg+0x6d0/0x6d0 [ 2520.099824][T25153] ? perf_trace_lock+0xeb/0x4d0 [ 2520.104691][T25153] ? lock_chain_count+0x20/0x20 [ 2520.109569][T25153] ? check_path.constprop.0+0x50/0x50 [ 2520.114975][T25153] ___sys_sendmsg+0xf3/0x170 [ 2520.119589][T25153] ? sendmsg_copy_msghdr+0x160/0x160 [ 2520.124904][T25153] ? __fget_files+0x21b/0x3e0 [ 2520.129614][T25153] ? lock_downgrade+0x6e0/0x6e0 [ 2520.134506][T25153] ? __fget_files+0x23d/0x3e0 [ 2520.139216][T25153] ? __fget_light+0xea/0x280 [ 2520.143830][T25153] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2520.150102][T25153] __sys_sendmsg+0xe5/0x1b0 [ 2520.154624][T25153] ? __sys_sendmsg_sock+0x30/0x30 [ 2520.159689][T25153] ? syscall_enter_from_user_mode+0x21/0x70 [ 2520.165614][T25153] do_syscall_64+0x35/0xb0 [ 2520.170054][T25153] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2520.175966][T25153] RIP: 0033:0x7f0a45f05ae9 19:22:31 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xd602) [ 2520.180396][T25153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2520.186294][T25162] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2520.200015][T25153] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2520.200046][T25153] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2520.200066][T25153] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2520.200084][T25153] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2520.200102][T25153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 19:22:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 12) 19:22:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x5c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x401) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, @in_args={0x1}}, './file0\x00'}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r6}, 0x8) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="a8380c18ae59cc2d80025f75b0ff603d3c7419db0e1357145eb738bc5311666f338568df17faf5df2cbeddb4f993aa778bc7630f60eb3a0112e9f2ee90a7ee327959724b0bcfbc87933e415d1f67605c97d6f5f1f5dfeae621cb0f8df879892323696eadfa1b22081565f80ea378c6ae103b65e2e764234fbe0fc36b4b2b5185809ba3b39db514db6d3c3a211c0868ef6efc671edd7452ea4ad81dd72340f0e72091c96d3706bf8fee086688199d0f658a191a588168dcf38d9af3d3143e71bcde04e17ed928d50ce53b982bc386dfce00073d475b961d5e44dd63f0fedcc4ddf6db0d50c45d29a1291328e83bc76d24c2226235e3e0f53f57937de8bf0eb082b60c7c8e24195ebabcbb4418f28be350c85377cd75675e231bf72465982ec73830a9e6b54585bcbc76a4258c20cecc5b4fa1d7500c0e3b2f8f2ee32e5e4b99a292b20e108dcef62e2579f7bc59eceb3d054a816c314c236369d25321c0c94ff33f0ee42d4e380ffbe8539f18f9d217bf2e56f9aaa83d5384a3f8ce85d243cbfca53b1266cbcfabd5c6bb4d78f2a2c1ff14f587e3dc16e3c4f8c9"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) [ 2520.200120][T25153] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2520.200158][T25153] [ 2520.284181][T25160] device 2589 entered promiscuous mode [ 2520.292763][T25165] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2520.331922][T25172] FAULT_INJECTION: forcing a failure. [ 2520.331922][T25172] name failslab, interval 1, probability 0, space 0, times 0 [ 2520.344664][T25172] CPU: 0 PID: 25172 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2520.353103][T25172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2520.363175][T25172] Call Trace: [ 2520.366468][T25172] [ 2520.369407][T25172] dump_stack_lvl+0xcd/0x134 [ 2520.374039][T25172] should_fail.cold+0x5/0xa [ 2520.378578][T25172] ? crypto_create_tfm_node+0x7f/0x320 [ 2520.384064][T25172] should_failslab+0x5/0x10 [ 2520.388594][T25172] __kmalloc_node+0x75/0x370 [ 2520.393215][T25172] crypto_create_tfm_node+0x7f/0x320 [ 2520.398527][T25172] crypto_alloc_tfm_node+0x107/0x260 [ 2520.403864][T25172] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2520.409623][T25172] tipc_crypto_key_init+0x82/0x110 [ 2520.414763][T25172] ? tipc_ehdr_validate+0x240/0x240 [ 2520.419981][T25172] ? crypto_mod_put+0x8c/0x100 [ 2520.424779][T25172] tipc_nl_node_set_key+0xa5d/0xf70 [ 2520.430012][T25172] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2520.436383][T25172] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2520.442657][T25172] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2520.450058][T25172] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2520.457380][T25172] genl_family_rcv_msg_doit+0x228/0x320 [ 2520.462954][T25172] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2520.470351][T25172] ? mutex_lock_io_nested+0x1150/0x1150 [ 2520.475939][T25172] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2520.482386][T25172] ? __radix_tree_lookup+0x211/0x2a0 [ 2520.487695][T25172] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2520.494306][T25172] ? genl_get_cmd+0x3cf/0x480 [ 2520.499010][T25172] genl_rcv_msg+0x328/0x580 [ 2520.503543][T25172] ? genl_get_cmd+0x480/0x480 [ 2520.508252][T25172] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2520.514528][T25172] ? lock_release+0x720/0x720 [ 2520.519228][T25172] ? check_path.constprop.0+0x50/0x50 [ 2520.521486][T25182] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2520.524620][T25172] netlink_rcv_skb+0x153/0x420 [ 2520.524659][T25172] ? genl_get_cmd+0x480/0x480 [ 2520.542136][T25172] ? netlink_ack+0xa60/0xa60 [ 2520.546756][T25172] ? netlink_deliver_tap+0x1b1/0xc30 [ 2520.552063][T25172] ? _copy_from_iter+0x12b/0x1320 [ 2520.557118][T25172] genl_rcv+0x24/0x40 [ 2520.561115][T25172] netlink_unicast+0x533/0x7d0 [ 2520.565910][T25172] ? netlink_attachskb+0x880/0x880 [ 2520.571047][T25172] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2520.577319][T25172] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2520.583579][T25172] ? __phys_addr_symbol+0x2c/0x70 [ 2520.588623][T25172] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2520.594625][T25172] ? __check_object_size+0x16e/0x3f0 [ 2520.599937][T25172] netlink_sendmsg+0x86d/0xda0 [ 2520.604730][T25172] ? netlink_unicast+0x7d0/0x7d0 [ 2520.609698][T25172] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2520.615964][T25172] ? netlink_unicast+0x7d0/0x7d0 [ 2520.620924][T25172] sock_sendmsg+0xcf/0x120 [ 2520.625366][T25172] ____sys_sendmsg+0x6e8/0x810 [ 2520.630157][T25172] ? kernel_sendmsg+0x50/0x50 [ 2520.634853][T25172] ? do_recvmmsg+0x6d0/0x6d0 [ 2520.639466][T25172] ? perf_trace_lock+0xeb/0x4d0 [ 2520.644337][T25172] ? lock_chain_count+0x20/0x20 [ 2520.649212][T25172] ? check_path.constprop.0+0x50/0x50 [ 2520.654612][T25172] ___sys_sendmsg+0xf3/0x170 [ 2520.659231][T25172] ? sendmsg_copy_msghdr+0x160/0x160 [ 2520.664549][T25172] ? __fget_files+0x21b/0x3e0 [ 2520.669246][T25172] ? lock_downgrade+0x6e0/0x6e0 [ 2520.674133][T25172] ? __fget_files+0x23d/0x3e0 [ 2520.678846][T25172] ? __fget_light+0xea/0x280 [ 2520.683474][T25172] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2520.689750][T25172] __sys_sendmsg+0xe5/0x1b0 [ 2520.694272][T25172] ? __sys_sendmsg_sock+0x30/0x30 [ 2520.699342][T25172] ? syscall_enter_from_user_mode+0x21/0x70 [ 2520.705261][T25172] do_syscall_64+0x35/0xb0 [ 2520.709700][T25172] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2520.715614][T25172] RIP: 0033:0x7f0a45f05ae9 [ 2520.720042][T25172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2520.739678][T25172] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2520.748113][T25172] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2520.756100][T25172] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2520.764086][T25172] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2520.772074][T25172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 19:22:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2402}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe9b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2520.780060][T25172] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2520.788073][T25172] [ 2520.814848][T25182] device 2590 entered promiscuous mode [ 2520.820899][T25190] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:22:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 13) [ 2520.915289][T25194] FAULT_INJECTION: forcing a failure. [ 2520.915289][T25194] name failslab, interval 1, probability 0, space 0, times 0 [ 2520.928244][T25194] CPU: 0 PID: 25194 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2520.936691][T25194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2520.946759][T25194] Call Trace: [ 2520.950050][T25194] [ 2520.952993][T25194] dump_stack_lvl+0xcd/0x134 [ 2520.957697][T25194] should_fail.cold+0x5/0xa [ 2520.962229][T25194] ? crypto_create_tfm_node+0x7f/0x320 [ 2520.967709][T25194] should_failslab+0x5/0x10 [ 2520.972224][T25194] __kmalloc_node+0x75/0x370 [ 2520.976847][T25194] crypto_create_tfm_node+0x7f/0x320 [ 2520.982164][T25194] crypto_alloc_tfm_node+0x107/0x260 [ 2520.987476][T25194] cryptd_alloc_aead+0x101/0x200 [ 2520.992441][T25194] ? cryptd_alloc_ahash+0x200/0x200 [ 2520.997667][T25194] ? __kmalloc_node+0x62/0x370 [ 2521.002472][T25194] simd_aead_init+0x67/0x1b0 [ 2521.007089][T25194] ? simd_aead_exit+0x40/0x40 [ 2521.011789][T25194] crypto_aead_init_tfm+0x138/0x1a0 [ 2521.017015][T25194] crypto_create_tfm_node+0x10d/0x320 [ 2521.022413][T25194] crypto_alloc_tfm_node+0x107/0x260 [ 2521.027728][T25194] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2521.033468][T25194] tipc_crypto_key_init+0x82/0x110 [ 2521.038586][T25194] ? tipc_ehdr_validate+0x240/0x240 [ 2521.043780][T25194] ? crypto_mod_put+0x8c/0x100 [ 2521.048550][T25194] tipc_nl_node_set_key+0xa5d/0xf70 [ 2521.053751][T25194] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2521.060004][T25194] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2521.066247][T25194] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2521.073725][T25194] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2521.081019][T25194] genl_family_rcv_msg_doit+0x228/0x320 [ 2521.086575][T25194] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2521.093948][T25194] ? mutex_lock_io_nested+0x1150/0x1150 [ 2521.099505][T25194] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2521.105750][T25194] ? __radix_tree_lookup+0x211/0x2a0 [ 2521.111035][T25194] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2521.117274][T25194] ? genl_get_cmd+0x3cf/0x480 [ 2521.121982][T25194] genl_rcv_msg+0x328/0x580 [ 2521.126500][T25194] ? genl_get_cmd+0x480/0x480 [ 2521.131184][T25194] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2521.137434][T25194] ? lock_release+0x720/0x720 [ 2521.142112][T25194] ? check_path.constprop.0+0x50/0x50 [ 2521.147489][T25194] netlink_rcv_skb+0x153/0x420 [ 2521.152260][T25194] ? genl_get_cmd+0x480/0x480 [ 2521.156938][T25194] ? netlink_ack+0xa60/0xa60 [ 2521.161537][T25194] ? netlink_deliver_tap+0x1b1/0xc30 [ 2521.166821][T25194] ? _copy_from_iter+0x12b/0x1320 [ 2521.171850][T25194] genl_rcv+0x24/0x40 [ 2521.175830][T25194] netlink_unicast+0x533/0x7d0 [ 2521.180600][T25194] ? netlink_attachskb+0x880/0x880 [ 2521.185705][T25194] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2521.191948][T25194] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2521.198196][T25194] ? __phys_addr_symbol+0x2c/0x70 [ 2521.203217][T25194] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2521.208932][T25194] ? __check_object_size+0x16e/0x3f0 [ 2521.214216][T25194] netlink_sendmsg+0x86d/0xda0 [ 2521.218983][T25194] ? netlink_unicast+0x7d0/0x7d0 [ 2521.223927][T25194] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2521.230169][T25194] ? netlink_unicast+0x7d0/0x7d0 [ 2521.235106][T25194] sock_sendmsg+0xcf/0x120 [ 2521.239525][T25194] ____sys_sendmsg+0x6e8/0x810 [ 2521.244290][T25194] ? kernel_sendmsg+0x50/0x50 [ 2521.248967][T25194] ? do_recvmmsg+0x6d0/0x6d0 [ 2521.253554][T25194] ? perf_trace_lock+0xeb/0x4d0 [ 2521.258399][T25194] ? lock_chain_count+0x20/0x20 [ 2521.263250][T25194] ? check_path.constprop.0+0x50/0x50 [ 2521.268624][T25194] ___sys_sendmsg+0xf3/0x170 [ 2521.273213][T25194] ? sendmsg_copy_msghdr+0x160/0x160 [ 2521.278504][T25194] ? __fget_files+0x21b/0x3e0 [ 2521.283178][T25194] ? lock_downgrade+0x6e0/0x6e0 [ 2521.288037][T25194] ? __fget_files+0x23d/0x3e0 [ 2521.292719][T25194] ? __fget_light+0xea/0x280 [ 2521.297307][T25194] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2521.303552][T25194] __sys_sendmsg+0xe5/0x1b0 [ 2521.308051][T25194] ? __sys_sendmsg_sock+0x30/0x30 [ 2521.313085][T25194] ? syscall_enter_from_user_mode+0x21/0x70 [ 2521.318983][T25194] do_syscall_64+0x35/0xb0 [ 2521.323398][T25194] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2521.329288][T25194] RIP: 0033:0x7f0a45f05ae9 [ 2521.333698][T25194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2521.353299][T25194] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2521.361709][T25194] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2521.369674][T25194] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2521.377648][T25194] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2521.385608][T25194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2521.393570][T25194] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2521.401555][T25194] [ 2521.429768][T25162] device 1172 entered promiscuous mode 19:22:32 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0xc0}], 0x1}, 0x0) 19:22:32 executing program 1: ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000003c0)={{}, r1, 0x4, @unused=[0x0, 0xfff, 0x7, 0xa6], @subvolid=0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000b2bb2a30e0f0d4c0d163a11de6fb2bc7c196b18c9670a412f55f13651ed97dc0b9c6a57a4c7f71c73505e34a2081084dc180e71eb818362ce0a71830eebe3e75925a925d6b5a0e611e7ed90b5c767cd571979013952701dceef10968b2eb9e64c306bc987e7747ead210f9f6172b74147fb01e9df40b2ab95fa9cb80b98205d2", @ANYRES16=r3, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2) 19:22:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a02}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xeab50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 14) [ 2521.562978][T25205] FAULT_INJECTION: forcing a failure. [ 2521.562978][T25205] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.575712][T25205] CPU: 0 PID: 25205 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2521.584150][T25205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2521.594220][T25205] Call Trace: [ 2521.597510][T25205] [ 2521.600448][T25205] dump_stack_lvl+0xcd/0x134 [ 2521.605069][T25205] should_fail.cold+0x5/0xa [ 2521.609602][T25205] ? crypto_create_tfm_node+0x7f/0x320 [ 2521.615088][T25205] should_failslab+0x5/0x10 [ 2521.619612][T25205] __kmalloc_node+0x75/0x370 [ 2521.624231][T25205] crypto_create_tfm_node+0x7f/0x320 [ 2521.629545][T25205] crypto_spawn_tfm2+0x60/0xb0 [ 2521.634326][T25205] ? cryptd_hash_init_tfm+0x120/0x120 [ 2521.639723][T25205] cryptd_aead_init_tfm+0x3c/0x140 [ 2521.644854][T25205] ? cryptd_hash_init_tfm+0x120/0x120 [ 2521.650253][T25205] crypto_aead_init_tfm+0x138/0x1a0 [ 2521.655492][T25205] crypto_create_tfm_node+0x10d/0x320 [ 2521.660890][T25205] crypto_alloc_tfm_node+0x107/0x260 [ 2521.666205][T25205] cryptd_alloc_aead+0x101/0x200 [ 2521.671169][T25205] ? cryptd_alloc_ahash+0x200/0x200 [ 2521.676403][T25205] ? __kmalloc_node+0x62/0x370 [ 2521.681210][T25205] simd_aead_init+0x67/0x1b0 [ 2521.685822][T25205] ? simd_aead_exit+0x40/0x40 [ 2521.690518][T25205] crypto_aead_init_tfm+0x138/0x1a0 [ 2521.696092][T25205] crypto_create_tfm_node+0x10d/0x320 [ 2521.698670][T25210] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2521.701486][T25205] crypto_alloc_tfm_node+0x107/0x260 [ 2521.701529][T25205] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2521.701578][T25205] tipc_crypto_key_init+0x82/0x110 [ 2521.701607][T25205] ? tipc_ehdr_validate+0x240/0x240 [ 2521.701632][T25205] ? crypto_mod_put+0x8c/0x100 [ 2521.701667][T25205] tipc_nl_node_set_key+0xa5d/0xf70 [ 2521.740920][T25205] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2521.747198][T25205] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2521.753471][T25205] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2521.760867][T25205] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2521.768183][T25205] genl_family_rcv_msg_doit+0x228/0x320 [ 2521.773750][T25205] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2521.781153][T25205] ? mutex_lock_io_nested+0x1150/0x1150 [ 2521.786735][T25205] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2521.793001][T25205] ? __radix_tree_lookup+0x211/0x2a0 [ 2521.798307][T25205] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2521.804575][T25205] ? genl_get_cmd+0x3cf/0x480 [ 2521.809280][T25205] genl_rcv_msg+0x328/0x580 [ 2521.813812][T25205] ? genl_get_cmd+0x480/0x480 [ 2521.818513][T25205] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2521.824784][T25205] ? lock_release+0x720/0x720 [ 2521.829484][T25205] ? check_path.constprop.0+0x50/0x50 [ 2521.834886][T25205] netlink_rcv_skb+0x153/0x420 [ 2521.839678][T25205] ? genl_get_cmd+0x480/0x480 [ 2521.844375][T25205] ? netlink_ack+0xa60/0xa60 [ 2521.849011][T25205] ? netlink_deliver_tap+0x1b1/0xc30 [ 2521.854315][T25205] ? _copy_from_iter+0x12b/0x1320 [ 2521.859375][T25205] genl_rcv+0x24/0x40 [ 2521.863383][T25205] netlink_unicast+0x533/0x7d0 [ 2521.868180][T25205] ? netlink_attachskb+0x880/0x880 [ 2521.873322][T25205] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2521.879602][T25205] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2521.885867][T25205] ? __phys_addr_symbol+0x2c/0x70 [ 2521.890911][T25205] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2521.896649][T25205] ? __check_object_size+0x16e/0x3f0 [ 2521.901968][T25205] netlink_sendmsg+0x86d/0xda0 [ 2521.906766][T25205] ? netlink_unicast+0x7d0/0x7d0 [ 2521.911741][T25205] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2521.918023][T25205] ? netlink_unicast+0x7d0/0x7d0 [ 2521.922989][T25205] sock_sendmsg+0xcf/0x120 [ 2521.927437][T25205] ____sys_sendmsg+0x6e8/0x810 [ 2521.932321][T25205] ? kernel_sendmsg+0x50/0x50 [ 2521.937108][T25205] ? do_recvmmsg+0x6d0/0x6d0 [ 2521.941720][T25205] ? perf_trace_lock+0xeb/0x4d0 [ 2521.946590][T25205] ? lock_chain_count+0x20/0x20 [ 2521.951471][T25205] ? check_path.constprop.0+0x50/0x50 [ 2521.956872][T25205] ___sys_sendmsg+0xf3/0x170 [ 2521.961486][T25205] ? sendmsg_copy_msghdr+0x160/0x160 [ 2521.966798][T25205] ? __fget_files+0x21b/0x3e0 [ 2521.971497][T25205] ? lock_downgrade+0x6e0/0x6e0 [ 2521.976387][T25205] ? __fget_files+0x23d/0x3e0 [ 2521.981106][T25205] ? __fget_light+0xea/0x280 [ 2521.985722][T25205] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2521.991993][T25205] __sys_sendmsg+0xe5/0x1b0 [ 2521.996524][T25205] ? __sys_sendmsg_sock+0x30/0x30 [ 2522.001587][T25205] ? syscall_enter_from_user_mode+0x21/0x70 [ 2522.007512][T25205] do_syscall_64+0x35/0xb0 [ 2522.011955][T25205] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2522.017865][T25205] RIP: 0033:0x7f0a45f05ae9 [ 2522.022293][T25205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2522.042091][T25205] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2522.050529][T25205] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 19:22:32 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xd801) 19:22:33 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xdc02) [ 2522.058520][T25205] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2522.066507][T25205] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2522.074494][T25205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2522.082481][T25205] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2522.090532][T25205] [ 2522.110191][T25210] device 2591 entered promiscuous mode 19:22:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 15) 19:22:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000002c0)="0400", 0x2, r3) add_key$user(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000540)="5a70b687c894e5e4a8f148e69ce98bdd5382afeb659db90e4c9e924d253ebe3dc7bad8ebdca2ed22c44219cc409aa626a898d8f2b5bd701af54a6ad2a8e9f40db3298342e252565865316debaa819d8283e82fbc0f88ba320f6f77ce3874331c234251408fab02f798bfd1a3589f618d8af6c927116cf5b1b05821857d4b71a9e393f48c678a43", 0x87, r3) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="d91abc39ed2d866d61531018752d0cb8f3565670a25076dc6cfd10bb40024b620eaf4577b184c4c472853d7f3caadf0f", @ANYRES32=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x85) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)={0xc0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4804}, 0x34000010) r4 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r3) add_key(&(0x7f0000000400)='id_legacy\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)="fe41c1bdac77211625a7f669f28eeef7d4ecede9cc7be7f900884657570b96df0cf91333d51f84111d5f73d360bc6dc369859f31a5aae22c8c3f29fcc4", 0x3d, r4) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) [ 2522.267341][T25217] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2522.285771][T25217] device 1173 entered promiscuous mode [ 2522.307371][T25223] FAULT_INJECTION: forcing a failure. [ 2522.307371][T25223] name failslab, interval 1, probability 0, space 0, times 0 [ 2522.320201][T25223] CPU: 0 PID: 25223 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2522.328630][T25223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2522.338701][T25223] Call Trace: [ 2522.342004][T25223] [ 2522.344948][T25223] dump_stack_lvl+0xcd/0x134 [ 2522.349578][T25223] should_fail.cold+0x5/0xa [ 2522.354111][T25223] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2522.360026][T25223] should_failslab+0x5/0x10 [ 2522.364551][T25223] kmem_cache_alloc_trace+0x55/0x2b0 [ 2522.369859][T25223] ? crypto_aead_setkey+0x10f/0x290 [ 2522.375088][T25223] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2522.380845][T25223] tipc_crypto_key_init+0x82/0x110 [ 2522.385979][T25223] ? tipc_ehdr_validate+0x240/0x240 [ 2522.391197][T25223] ? crypto_mod_put+0x8c/0x100 [ 2522.395990][T25223] tipc_nl_node_set_key+0xa5d/0xf70 [ 2522.401219][T25223] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2522.407494][T25223] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2522.413756][T25223] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2522.421153][T25223] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2522.428474][T25223] genl_family_rcv_msg_doit+0x228/0x320 [ 2522.434139][T25223] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2522.441536][T25223] ? mutex_lock_io_nested+0x1150/0x1150 [ 2522.447130][T25223] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2522.453398][T25223] ? __radix_tree_lookup+0x211/0x2a0 [ 2522.458712][T25223] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2522.464989][T25223] ? genl_get_cmd+0x3cf/0x480 [ 2522.469701][T25223] genl_rcv_msg+0x328/0x580 [ 2522.474233][T25223] ? genl_get_cmd+0x480/0x480 [ 2522.478937][T25223] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2522.485209][T25223] ? lock_release+0x720/0x720 [ 2522.489911][T25223] ? check_path.constprop.0+0x50/0x50 [ 2522.495322][T25223] netlink_rcv_skb+0x153/0x420 [ 2522.500111][T25223] ? genl_get_cmd+0x480/0x480 [ 2522.505084][T25223] ? netlink_ack+0xa60/0xa60 [ 2522.509701][T25223] ? netlink_deliver_tap+0x1b1/0xc30 [ 2522.515010][T25223] ? _copy_from_iter+0x12b/0x1320 [ 2522.520065][T25223] genl_rcv+0x24/0x40 [ 2522.524071][T25223] netlink_unicast+0x533/0x7d0 [ 2522.528860][T25223] ? netlink_attachskb+0x880/0x880 [ 2522.533990][T25223] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2522.540261][T25223] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2522.546523][T25223] ? __phys_addr_symbol+0x2c/0x70 [ 2522.551569][T25223] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2522.557307][T25223] ? __check_object_size+0x16e/0x3f0 [ 2522.562619][T25223] netlink_sendmsg+0x86d/0xda0 [ 2522.567424][T25223] ? netlink_unicast+0x7d0/0x7d0 [ 2522.572400][T25223] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2522.578668][T25223] ? netlink_unicast+0x7d0/0x7d0 [ 2522.583630][T25223] sock_sendmsg+0xcf/0x120 [ 2522.588073][T25223] ____sys_sendmsg+0x6e8/0x810 [ 2522.592863][T25223] ? kernel_sendmsg+0x50/0x50 [ 2522.597561][T25223] ? do_recvmmsg+0x6d0/0x6d0 [ 2522.599829][T25232] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2522.602168][T25223] ? perf_trace_lock+0xeb/0x4d0 [ 2522.602200][T25223] ? lock_chain_count+0x20/0x20 [ 2522.602236][T25223] ? check_path.constprop.0+0x50/0x50 [ 2522.602272][T25223] ___sys_sendmsg+0xf3/0x170 [ 2522.602304][T25223] ? sendmsg_copy_msghdr+0x160/0x160 [ 2522.635269][T25223] ? __fget_files+0x21b/0x3e0 [ 2522.639973][T25223] ? lock_downgrade+0x6e0/0x6e0 [ 2522.644864][T25223] ? __fget_files+0x23d/0x3e0 [ 2522.649576][T25223] ? __fget_light+0xea/0x280 [ 2522.654194][T25223] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2522.660472][T25223] __sys_sendmsg+0xe5/0x1b0 [ 2522.665004][T25223] ? __sys_sendmsg_sock+0x30/0x30 [ 2522.670067][T25223] ? syscall_enter_from_user_mode+0x21/0x70 [ 2522.675993][T25223] do_syscall_64+0x35/0xb0 [ 2522.680440][T25223] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2522.686355][T25223] RIP: 0033:0x7f0a45f05ae9 [ 2522.690788][T25223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2522.710414][T25223] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:22:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2c03}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:33 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0xec0}], 0x1}, 0x0) 19:22:33 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xde02) [ 2522.718851][T25223] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2522.726873][T25223] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2522.734864][T25223] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2522.742852][T25223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2522.750840][T25223] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2522.758849][T25223] 19:22:34 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0xc, 0x3, 0x801, 0x70bd29, 0x25dfdbfd, {0x2, 0x0, 0x5}, [@generic="c570257a4e3111a5d2d412173321647da925a1e76350e059c7a5f07c69e0afd29ded04462b2193b57b9f5cd2ef8c4b5bb9e77c2e46f0b54555fd87921d412fdac876637c309782b7b8cbb336421e237389e600c94a5856ebeca92e48a6eec15fc854f3c997a52402c2f9ed"]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x44005) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="39f733bb0321ad375ccdffc10b0700fc0f"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 16) [ 2522.794334][T25232] device 2592 entered promiscuous mode [ 2522.896154][T25240] FAULT_INJECTION: forcing a failure. [ 2522.896154][T25240] name failslab, interval 1, probability 0, space 0, times 0 [ 2522.908622][T25241] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2522.908998][T25240] CPU: 0 PID: 25240 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2522.925363][T25240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2522.935433][T25240] Call Trace: [ 2522.938763][T25240] [ 2522.941706][T25240] dump_stack_lvl+0xcd/0x134 [ 2522.946325][T25240] should_fail.cold+0x5/0xa [ 2522.950856][T25240] ? crypto_create_tfm_node+0x7f/0x320 [ 2522.956336][T25240] should_failslab+0x5/0x10 [ 2522.960874][T25240] __kmalloc_node+0x75/0x370 [ 2522.965494][T25240] crypto_create_tfm_node+0x7f/0x320 [ 2522.970806][T25240] crypto_alloc_tfm_node+0x107/0x260 [ 2522.976134][T25240] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2522.981902][T25240] tipc_crypto_key_init+0x82/0x110 [ 2522.987039][T25240] ? tipc_ehdr_validate+0x240/0x240 [ 2522.992259][T25240] ? crypto_mod_put+0x8c/0x100 [ 2522.997056][T25240] tipc_nl_node_set_key+0xa5d/0xf70 [ 2523.002273][T25240] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2523.002441][T25242] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2523.008539][T25240] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2523.008578][T25240] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2523.030229][T25240] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2523.037547][T25240] genl_family_rcv_msg_doit+0x228/0x320 [ 2523.043123][T25240] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2523.050520][T25240] ? mutex_lock_io_nested+0x1150/0x1150 [ 2523.056104][T25240] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2523.062368][T25240] ? __radix_tree_lookup+0x211/0x2a0 [ 2523.067674][T25240] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2523.073938][T25240] ? genl_get_cmd+0x3cf/0x480 [ 2523.078648][T25240] genl_rcv_msg+0x328/0x580 [ 2523.083183][T25240] ? genl_get_cmd+0x480/0x480 [ 2523.087883][T25240] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2523.094153][T25240] ? lock_release+0x720/0x720 [ 2523.098863][T25240] ? check_path.constprop.0+0x50/0x50 [ 2523.104262][T25240] netlink_rcv_skb+0x153/0x420 [ 2523.109051][T25240] ? genl_get_cmd+0x480/0x480 [ 2523.113756][T25240] ? netlink_ack+0xa60/0xa60 [ 2523.118379][T25240] ? netlink_deliver_tap+0x1b1/0xc30 [ 2523.123683][T25240] ? _copy_from_iter+0x12b/0x1320 [ 2523.128741][T25240] genl_rcv+0x24/0x40 [ 2523.132748][T25240] netlink_unicast+0x533/0x7d0 [ 2523.137545][T25240] ? netlink_attachskb+0x880/0x880 [ 2523.142677][T25240] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2523.148948][T25240] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2523.155214][T25240] ? __phys_addr_symbol+0x2c/0x70 [ 2523.160261][T25240] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2523.166003][T25240] ? __check_object_size+0x16e/0x3f0 [ 2523.171314][T25240] netlink_sendmsg+0x86d/0xda0 [ 2523.176109][T25240] ? netlink_unicast+0x7d0/0x7d0 [ 2523.181080][T25240] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2523.187345][T25240] ? netlink_unicast+0x7d0/0x7d0 [ 2523.192306][T25240] sock_sendmsg+0xcf/0x120 [ 2523.196748][T25240] ____sys_sendmsg+0x6e8/0x810 [ 2523.201542][T25240] ? kernel_sendmsg+0x50/0x50 [ 2523.206241][T25240] ? do_recvmmsg+0x6d0/0x6d0 [ 2523.210856][T25240] ? perf_trace_lock+0xeb/0x4d0 [ 2523.215722][T25240] ? lock_chain_count+0x20/0x20 [ 2523.220602][T25240] ? check_path.constprop.0+0x50/0x50 [ 2523.225999][T25240] ___sys_sendmsg+0xf3/0x170 [ 2523.230611][T25240] ? sendmsg_copy_msghdr+0x160/0x160 [ 2523.235919][T25240] ? __fget_files+0x21b/0x3e0 [ 2523.240622][T25240] ? lock_downgrade+0x6e0/0x6e0 [ 2523.245513][T25240] ? __fget_files+0x23d/0x3e0 [ 2523.250216][T25240] ? __fget_light+0xea/0x280 [ 2523.254829][T25240] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2523.261104][T25240] __sys_sendmsg+0xe5/0x1b0 [ 2523.265628][T25240] ? __sys_sendmsg_sock+0x30/0x30 [ 2523.270691][T25240] ? syscall_enter_from_user_mode+0x21/0x70 [ 2523.276616][T25240] do_syscall_64+0x35/0xb0 [ 2523.281057][T25240] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2523.286972][T25240] RIP: 0033:0x7f0a45f05ae9 [ 2523.291405][T25240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2523.311029][T25240] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2523.319461][T25240] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2523.327450][T25240] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2523.335432][T25240] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 19:22:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3a03}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xec030000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x25}, @NL80211_ATTR_IE={0x16, 0x2a, [@mic={0x8c, 0x10, {0x632, "b43436f4768c", @short="d74a1426ecdd70c3"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1e}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) [ 2523.343417][T25240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2523.351403][T25240] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2523.359672][T25240] [ 2523.379102][T25241] device 1174 entered promiscuous mode 19:22:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x1a8, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r3, 0xffff, 0x0, 0x0, {0x4a}}, 0x14}, 0x1, 0xffffff9e}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}]}, 0x54}}, 0x1) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) [ 2523.401168][T25242] device 2593 entered promiscuous mode 19:22:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 17) [ 2523.552540][T25260] FAULT_INJECTION: forcing a failure. [ 2523.552540][T25260] name failslab, interval 1, probability 0, space 0, times 0 [ 2523.565786][T25260] CPU: 0 PID: 25260 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2523.574231][T25260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2523.584301][T25260] Call Trace: [ 2523.587591][T25260] [ 2523.590534][T25260] dump_stack_lvl+0xcd/0x134 [ 2523.595150][T25260] should_fail.cold+0x5/0xa [ 2523.599684][T25260] ? crypto_create_tfm_node+0x7f/0x320 [ 2523.605165][T25260] should_failslab+0x5/0x10 [ 2523.609692][T25260] __kmalloc_node+0x75/0x370 [ 2523.614311][T25260] crypto_create_tfm_node+0x7f/0x320 [ 2523.619623][T25260] crypto_alloc_tfm_node+0x107/0x260 [ 2523.624941][T25260] cryptd_alloc_aead+0x101/0x200 [ 2523.629913][T25260] ? cryptd_alloc_ahash+0x200/0x200 [ 2523.635148][T25260] ? __kmalloc_node+0x62/0x370 [ 2523.639959][T25260] simd_aead_init+0x67/0x1b0 [ 2523.644571][T25260] ? simd_aead_exit+0x40/0x40 [ 2523.649269][T25260] crypto_aead_init_tfm+0x138/0x1a0 [ 2523.654499][T25260] crypto_create_tfm_node+0x10d/0x320 [ 2523.659903][T25260] crypto_alloc_tfm_node+0x107/0x260 [ 2523.665218][T25260] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2523.670976][T25260] tipc_crypto_key_init+0x82/0x110 [ 2523.676113][T25260] ? tipc_ehdr_validate+0x240/0x240 [ 2523.681335][T25260] ? crypto_mod_put+0x8c/0x100 [ 2523.686132][T25260] tipc_nl_node_set_key+0xa5d/0xf70 [ 2523.691366][T25260] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2523.697641][T25260] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2523.703917][T25260] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2523.711318][T25260] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2523.718641][T25260] genl_family_rcv_msg_doit+0x228/0x320 [ 2523.724222][T25260] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2523.731609][T25260] ? mutex_lock_io_nested+0x1150/0x1150 [ 2523.737190][T25260] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2523.743461][T25260] ? __radix_tree_lookup+0x211/0x2a0 [ 2523.748777][T25260] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2523.755051][T25260] ? genl_get_cmd+0x3cf/0x480 [ 2523.759758][T25260] genl_rcv_msg+0x328/0x580 [ 2523.764299][T25260] ? genl_get_cmd+0x480/0x480 [ 2523.769005][T25260] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2523.775273][T25260] ? lock_release+0x720/0x720 [ 2523.779965][T25260] ? check_path.constprop.0+0x50/0x50 [ 2523.785367][T25260] netlink_rcv_skb+0x153/0x420 [ 2523.790159][T25260] ? genl_get_cmd+0x480/0x480 [ 2523.794874][T25260] ? netlink_ack+0xa60/0xa60 [ 2523.799495][T25260] ? netlink_deliver_tap+0x1b1/0xc30 [ 2523.804807][T25260] ? _copy_from_iter+0x12b/0x1320 [ 2523.809863][T25260] genl_rcv+0x24/0x40 [ 2523.813869][T25260] netlink_unicast+0x533/0x7d0 [ 2523.818666][T25260] ? netlink_attachskb+0x880/0x880 [ 2523.823801][T25260] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2523.830080][T25260] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2523.836346][T25260] ? __phys_addr_symbol+0x2c/0x70 [ 2523.841391][T25260] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2523.847137][T25260] ? __check_object_size+0x16e/0x3f0 [ 2523.852452][T25260] netlink_sendmsg+0x86d/0xda0 [ 2523.857249][T25260] ? netlink_unicast+0x7d0/0x7d0 [ 2523.862218][T25260] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2523.868484][T25260] ? netlink_unicast+0x7d0/0x7d0 [ 2523.873455][T25260] sock_sendmsg+0xcf/0x120 [ 2523.877896][T25260] ____sys_sendmsg+0x6e8/0x810 [ 2523.882682][T25260] ? kernel_sendmsg+0x50/0x50 [ 2523.887384][T25260] ? do_recvmmsg+0x6d0/0x6d0 [ 2523.891996][T25260] ? perf_trace_lock+0xeb/0x4d0 [ 2523.896864][T25260] ? lock_chain_count+0x20/0x20 [ 2523.901745][T25260] ? check_path.constprop.0+0x50/0x50 [ 2523.907151][T25260] ___sys_sendmsg+0xf3/0x170 [ 2523.911570][T25269] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2523.911784][T25260] ? sendmsg_copy_msghdr+0x160/0x160 [ 2523.925151][T25260] ? __fget_files+0x21b/0x3e0 [ 2523.929854][T25260] ? lock_downgrade+0x6e0/0x6e0 [ 2523.934745][T25260] ? __fget_files+0x23d/0x3e0 [ 2523.939461][T25260] ? __fget_light+0xea/0x280 [ 2523.944074][T25260] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2523.950345][T25260] __sys_sendmsg+0xe5/0x1b0 [ 2523.954861][T25260] ? __sys_sendmsg_sock+0x30/0x30 [ 2523.959934][T25260] ? syscall_enter_from_user_mode+0x21/0x70 [ 2523.965854][T25260] do_syscall_64+0x35/0xb0 [ 2523.970292][T25260] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2523.976191][T25260] RIP: 0033:0x7f0a45f05ae9 [ 2523.980622][T25260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:22:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xecb50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:34 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x33fe0}], 0x1}, 0x0) 19:22:34 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xde03) [ 2524.000250][T25260] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2524.008685][T25260] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2524.016673][T25260] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2524.024665][T25260] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2524.032656][T25260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2524.040642][T25260] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2524.048739][T25260] 19:22:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 18) [ 2524.084561][T25269] device 2594 entered promiscuous mode [ 2524.125771][T25273] FAULT_INJECTION: forcing a failure. [ 2524.125771][T25273] name failslab, interval 1, probability 0, space 0, times 0 [ 2524.138480][T25273] CPU: 0 PID: 25273 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2524.146919][T25273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2524.156992][T25273] Call Trace: [ 2524.160291][T25273] [ 2524.163238][T25273] dump_stack_lvl+0xcd/0x134 [ 2524.167867][T25273] should_fail.cold+0x5/0xa [ 2524.172406][T25273] ? crypto_create_tfm_node+0x7f/0x320 [ 2524.177889][T25273] should_failslab+0x5/0x10 [ 2524.182420][T25273] __kmalloc_node+0x75/0x370 [ 2524.187128][T25273] crypto_create_tfm_node+0x7f/0x320 [ 2524.192443][T25273] crypto_spawn_tfm2+0x60/0xb0 [ 2524.197228][T25273] ? cryptd_hash_init_tfm+0x120/0x120 [ 2524.202631][T25273] cryptd_aead_init_tfm+0x3c/0x140 [ 2524.207774][T25273] ? cryptd_hash_init_tfm+0x120/0x120 [ 2524.213169][T25273] crypto_aead_init_tfm+0x138/0x1a0 [ 2524.218402][T25273] crypto_create_tfm_node+0x10d/0x320 [ 2524.223807][T25273] crypto_alloc_tfm_node+0x107/0x260 [ 2524.229125][T25273] cryptd_alloc_aead+0x101/0x200 [ 2524.234092][T25273] ? cryptd_alloc_ahash+0x200/0x200 [ 2524.239324][T25273] ? __kmalloc_node+0x62/0x370 [ 2524.244133][T25273] simd_aead_init+0x67/0x1b0 [ 2524.248859][T25273] ? simd_aead_exit+0x40/0x40 [ 2524.253560][T25273] crypto_aead_init_tfm+0x138/0x1a0 [ 2524.258796][T25273] crypto_create_tfm_node+0x10d/0x320 [ 2524.264201][T25273] crypto_alloc_tfm_node+0x107/0x260 [ 2524.269521][T25273] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2524.275281][T25273] tipc_crypto_key_init+0x82/0x110 [ 2524.280426][T25273] ? tipc_ehdr_validate+0x240/0x240 [ 2524.285650][T25273] ? crypto_mod_put+0x8c/0x100 [ 2524.290448][T25273] tipc_nl_node_set_key+0xa5d/0xf70 [ 2524.295679][T25273] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2524.299461][T25274] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2524.301972][T25273] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2524.316256][T25273] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2524.323657][T25273] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2524.330981][T25273] genl_family_rcv_msg_doit+0x228/0x320 [ 2524.336559][T25273] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2524.343960][T25273] ? mutex_lock_io_nested+0x1150/0x1150 [ 2524.349549][T25273] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2524.355819][T25273] ? __radix_tree_lookup+0x211/0x2a0 [ 2524.361133][T25273] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2524.367405][T25273] ? genl_get_cmd+0x3cf/0x480 [ 2524.372115][T25273] genl_rcv_msg+0x328/0x580 [ 2524.376655][T25273] ? genl_get_cmd+0x480/0x480 [ 2524.381358][T25273] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2524.387632][T25273] ? lock_release+0x720/0x720 [ 2524.392333][T25273] ? check_path.constprop.0+0x50/0x50 [ 2524.397734][T25273] netlink_rcv_skb+0x153/0x420 [ 2524.402535][T25273] ? genl_get_cmd+0x480/0x480 [ 2524.407245][T25273] ? netlink_ack+0xa60/0xa60 [ 2524.411871][T25273] ? netlink_deliver_tap+0x1b1/0xc30 [ 2524.417179][T25273] ? _copy_from_iter+0x12b/0x1320 [ 2524.422237][T25273] genl_rcv+0x24/0x40 [ 2524.426241][T25273] netlink_unicast+0x533/0x7d0 [ 2524.431039][T25273] ? netlink_attachskb+0x880/0x880 [ 2524.436175][T25273] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2524.442446][T25273] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2524.448713][T25273] ? __phys_addr_symbol+0x2c/0x70 [ 2524.453774][T25273] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2524.459521][T25273] ? __check_object_size+0x16e/0x3f0 [ 2524.464832][T25273] netlink_sendmsg+0x86d/0xda0 [ 2524.469635][T25273] ? netlink_unicast+0x7d0/0x7d0 [ 2524.474608][T25273] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2524.480875][T25273] ? netlink_unicast+0x7d0/0x7d0 [ 2524.485838][T25273] sock_sendmsg+0xcf/0x120 [ 2524.490285][T25273] ____sys_sendmsg+0x6e8/0x810 [ 2524.495085][T25273] ? kernel_sendmsg+0x50/0x50 [ 2524.499785][T25273] ? do_recvmmsg+0x6d0/0x6d0 [ 2524.504396][T25273] ? perf_trace_lock+0xeb/0x4d0 [ 2524.509268][T25273] ? lock_chain_count+0x20/0x20 [ 2524.514145][T25273] ? check_path.constprop.0+0x50/0x50 [ 2524.519637][T25273] ___sys_sendmsg+0xf3/0x170 [ 2524.524252][T25273] ? sendmsg_copy_msghdr+0x160/0x160 [ 2524.529564][T25273] ? __fget_files+0x21b/0x3e0 [ 2524.534266][T25273] ? lock_downgrade+0x6e0/0x6e0 [ 2524.539159][T25273] ? __fget_files+0x23d/0x3e0 [ 2524.543876][T25273] ? __fget_light+0xea/0x280 [ 2524.548493][T25273] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2524.554767][T25273] __sys_sendmsg+0xe5/0x1b0 [ 2524.559294][T25273] ? __sys_sendmsg_sock+0x30/0x30 [ 2524.564360][T25273] ? syscall_enter_from_user_mode+0x21/0x70 [ 2524.570461][T25273] do_syscall_64+0x35/0xb0 [ 2524.574902][T25273] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2524.580816][T25273] RIP: 0033:0x7f0a45f05ae9 [ 2524.585246][T25273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2524.604963][T25273] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2524.613404][T25273] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 19:22:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x5c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0xff, 0x9, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x10, 0x40, 0xffff, 0x20}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x208, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x1}, 0x2000880) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="02040000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40, 0x7d}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040010) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xedb50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xe001) 19:22:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2524.621395][T25273] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2524.629380][T25273] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2524.637360][T25273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2524.645333][T25273] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2524.653321][T25273] [ 2524.683376][T25274] device 2595 entered promiscuous mode [ 2524.690111][T25278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:22:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 19) [ 2524.733270][T25278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:22:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000a93f7de8a5f88b460df4b3f9417652bc8f1d302e69cd2a9b904378e14286d7050b804f80106b7e94e8c03c57c4b1dcb8c808bc125cbd47e447b3d5ffdf199980199e72d1c11eb2b572a5b0da70f016596f773c0a23b8545af4067f6f31a66e53dbc1bf49a45e74d24943f9d39c9966ee2ac7070da967cedc0d99f869db2d04dafe65855daa8f08d2c7b85d48f3c5bcef5a0a56c05554ba9b89198ccae072469", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x1, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) [ 2524.843776][T25315] FAULT_INJECTION: forcing a failure. [ 2524.843776][T25315] name failslab, interval 1, probability 0, space 0, times 0 [ 2524.856573][T25315] CPU: 0 PID: 25315 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2524.865016][T25315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2524.875091][T25315] Call Trace: [ 2524.878384][T25315] [ 2524.881332][T25315] dump_stack_lvl+0xcd/0x134 [ 2524.885951][T25315] should_fail.cold+0x5/0xa [ 2524.890490][T25315] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2524.896417][T25315] should_failslab+0x5/0x10 [ 2524.900939][T25315] kmem_cache_alloc_trace+0x55/0x2b0 [ 2524.906254][T25315] ? crypto_aead_setkey+0x10f/0x290 [ 2524.911489][T25315] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2524.917254][T25315] tipc_crypto_key_init+0x82/0x110 [ 2524.922392][T25315] ? tipc_ehdr_validate+0x240/0x240 [ 2524.927611][T25315] ? crypto_mod_put+0x8c/0x100 [ 2524.932410][T25315] tipc_nl_node_set_key+0xa5d/0xf70 [ 2524.937646][T25315] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2524.943928][T25315] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2524.950199][T25315] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2524.957602][T25315] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2524.964928][T25315] genl_family_rcv_msg_doit+0x228/0x320 [ 2524.970510][T25315] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2524.977911][T25315] ? mutex_lock_io_nested+0x1150/0x1150 [ 2524.983500][T25315] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2524.989774][T25315] ? __radix_tree_lookup+0x211/0x2a0 [ 2524.995085][T25315] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2525.001354][T25315] ? genl_get_cmd+0x3cf/0x480 [ 2525.006069][T25315] genl_rcv_msg+0x328/0x580 [ 2525.010605][T25315] ? genl_get_cmd+0x480/0x480 [ 2525.015312][T25315] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2525.021589][T25315] ? lock_release+0x720/0x720 [ 2525.026293][T25315] ? check_path.constprop.0+0x50/0x50 [ 2525.031730][T25315] netlink_rcv_skb+0x153/0x420 [ 2525.036525][T25315] ? genl_get_cmd+0x480/0x480 [ 2525.041232][T25315] ? netlink_ack+0xa60/0xa60 [ 2525.045863][T25315] ? netlink_deliver_tap+0x1b1/0xc30 [ 2525.051173][T25315] ? _copy_from_iter+0x12b/0x1320 [ 2525.056231][T25315] genl_rcv+0x24/0x40 [ 2525.060241][T25315] netlink_unicast+0x533/0x7d0 [ 2525.065038][T25315] ? netlink_attachskb+0x880/0x880 [ 2525.070171][T25315] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2525.076461][T25315] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2525.082739][T25315] ? __phys_addr_symbol+0x2c/0x70 [ 2525.087791][T25315] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2525.093536][T25315] ? __check_object_size+0x16e/0x3f0 [ 2525.098854][T25315] netlink_sendmsg+0x86d/0xda0 [ 2525.103656][T25315] ? netlink_unicast+0x7d0/0x7d0 [ 2525.108629][T25315] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2525.114883][T25315] ? netlink_unicast+0x7d0/0x7d0 [ 2525.119828][T25315] sock_sendmsg+0xcf/0x120 [ 2525.124256][T25315] ____sys_sendmsg+0x6e8/0x810 [ 2525.129029][T25315] ? kernel_sendmsg+0x50/0x50 [ 2525.133711][T25315] ? do_recvmmsg+0x6d0/0x6d0 [ 2525.138310][T25315] ? perf_trace_lock+0xeb/0x4d0 [ 2525.143165][T25315] ? lock_chain_count+0x20/0x20 [ 2525.148024][T25315] ? check_path.constprop.0+0x50/0x50 [ 2525.153408][T25315] ___sys_sendmsg+0xf3/0x170 [ 2525.158000][T25315] ? sendmsg_copy_msghdr+0x160/0x160 [ 2525.163291][T25315] ? __fget_files+0x21b/0x3e0 [ 2525.167977][T25315] ? lock_downgrade+0x6e0/0x6e0 [ 2525.172844][T25315] ? __fget_files+0x23d/0x3e0 [ 2525.177535][T25315] ? __fget_light+0xea/0x280 [ 2525.182129][T25315] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2525.188380][T25315] __sys_sendmsg+0xe5/0x1b0 [ 2525.192891][T25315] ? __sys_sendmsg_sock+0x30/0x30 [ 2525.197933][T25315] ? syscall_enter_from_user_mode+0x21/0x70 [ 2525.203831][T25315] do_syscall_64+0x35/0xb0 [ 2525.208255][T25315] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2525.214152][T25315] RIP: 0033:0x7f0a45f05ae9 [ 2525.218568][T25315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:22:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xeeb50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xe203) 19:22:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:36 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x5f5e0ff}], 0x1}, 0x0) [ 2525.238178][T25315] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2525.246594][T25315] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2525.254561][T25315] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2525.262547][T25315] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2525.270517][T25315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2525.278485][T25315] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2525.286470][T25315] 19:22:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffff5b9e}}, './file0\x00'}) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="86963fa5", @ANYRES64=r1, @ANYBLOB="0b0700e110000008725706b8a1d65a7d0234990633a2104fd72d8deb9d6b557423322546ae4380a34ebfa015014ee9d4c81ac06b095e6484d0695a79529505e4121a1b82f0b0bbbc86610141a88e57191f37a4c54c310a8323473e916bc5d32b4c6224bc568fe5de6c0ef554b19652041cda6e0a9ac4ac529948be24eb9f989cabd05826620917cae2ebd7f48291a72708f8525dc0942aebb1f29ff2e1d3791f9c360906d2a2510d6791568946fe2df2f16906a46488cefaf954074a8d5432760adbd0dc58d5275c34ba8fde0031ba0b31abc9e76ab6b207ddcc310421be211f97b1ebf1b0d7ba02c3c0c58b7ab9adc89a0861365222bf384cd6a311b18b432b5ef661b4cc"], 0x14}}, 0x40004) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 20) [ 2525.455415][T25332] FAULT_INJECTION: forcing a failure. [ 2525.455415][T25332] name failslab, interval 1, probability 0, space 0, times 0 [ 2525.468251][T25332] CPU: 0 PID: 25332 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2525.476691][T25332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2525.486772][T25332] Call Trace: [ 2525.490064][T25332] [ 2525.493010][T25332] dump_stack_lvl+0xcd/0x134 [ 2525.497626][T25332] should_fail.cold+0x5/0xa [ 2525.502168][T25332] ? crypto_create_tfm_node+0x7f/0x320 [ 2525.507647][T25332] should_failslab+0x5/0x10 [ 2525.512186][T25332] __kmalloc_node+0x75/0x370 [ 2525.516819][T25332] crypto_create_tfm_node+0x7f/0x320 [ 2525.522133][T25332] crypto_alloc_tfm_node+0x107/0x260 [ 2525.527480][T25332] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2525.533245][T25332] tipc_crypto_key_init+0x82/0x110 [ 2525.538382][T25332] ? tipc_ehdr_validate+0x240/0x240 [ 2525.543607][T25332] ? crypto_mod_put+0x8c/0x100 [ 2525.548461][T25332] tipc_nl_node_set_key+0xa5d/0xf70 [ 2525.553704][T25332] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2525.559999][T25332] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2525.566268][T25332] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2525.573668][T25332] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2525.581002][T25332] genl_family_rcv_msg_doit+0x228/0x320 [ 2525.586582][T25332] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2525.593978][T25332] ? mutex_lock_io_nested+0x1150/0x1150 [ 2525.599565][T25332] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2525.605834][T25332] ? __radix_tree_lookup+0x211/0x2a0 [ 2525.611143][T25332] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2525.617408][T25332] ? genl_get_cmd+0x3cf/0x480 [ 2525.622121][T25332] genl_rcv_msg+0x328/0x580 [ 2525.626660][T25332] ? genl_get_cmd+0x480/0x480 [ 2525.631373][T25332] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2525.637643][T25332] ? lock_release+0x720/0x720 [ 2525.642352][T25332] ? check_path.constprop.0+0x50/0x50 [ 2525.647841][T25332] netlink_rcv_skb+0x153/0x420 [ 2525.652637][T25332] ? genl_get_cmd+0x480/0x480 [ 2525.657343][T25332] ? netlink_ack+0xa60/0xa60 [ 2525.661973][T25332] ? netlink_deliver_tap+0x1b1/0xc30 [ 2525.667281][T25332] ? _copy_from_iter+0x12b/0x1320 [ 2525.672339][T25332] genl_rcv+0x24/0x40 [ 2525.676349][T25332] netlink_unicast+0x533/0x7d0 [ 2525.681144][T25332] ? netlink_attachskb+0x880/0x880 [ 2525.686273][T25332] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2525.692542][T25332] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2525.698809][T25332] ? __phys_addr_symbol+0x2c/0x70 [ 2525.703860][T25332] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2525.709610][T25332] ? __check_object_size+0x16e/0x3f0 [ 2525.714937][T25332] netlink_sendmsg+0x86d/0xda0 [ 2525.719738][T25332] ? netlink_unicast+0x7d0/0x7d0 [ 2525.724714][T25332] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2525.730987][T25332] ? netlink_unicast+0x7d0/0x7d0 [ 2525.734688][T25338] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2525.735980][T25332] sock_sendmsg+0xcf/0x120 [ 2525.736021][T25332] ____sys_sendmsg+0x6e8/0x810 [ 2525.753233][T25332] ? kernel_sendmsg+0x50/0x50 [ 2525.757936][T25332] ? do_recvmmsg+0x6d0/0x6d0 [ 2525.762553][T25332] ? perf_trace_lock+0xeb/0x4d0 [ 2525.767430][T25332] ? lock_chain_count+0x20/0x20 [ 2525.772310][T25332] ? check_path.constprop.0+0x50/0x50 [ 2525.777721][T25332] ___sys_sendmsg+0xf3/0x170 [ 2525.782339][T25332] ? sendmsg_copy_msghdr+0x160/0x160 [ 2525.787654][T25332] ? __fget_files+0x21b/0x3e0 [ 2525.792361][T25332] ? lock_downgrade+0x6e0/0x6e0 [ 2525.797259][T25332] ? __fget_files+0x23d/0x3e0 [ 2525.801977][T25332] ? __fget_light+0xea/0x280 [ 2525.806594][T25332] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2525.812878][T25332] __sys_sendmsg+0xe5/0x1b0 [ 2525.817406][T25332] ? __sys_sendmsg_sock+0x30/0x30 [ 2525.822911][T25332] ? syscall_enter_from_user_mode+0x21/0x70 [ 2525.828835][T25332] do_syscall_64+0x35/0xb0 [ 2525.833281][T25332] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2525.839199][T25332] RIP: 0033:0x7f0a45f05ae9 [ 2525.843632][T25332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2525.863382][T25332] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2525.871824][T25332] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2525.879820][T25332] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2525.887814][T25332] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2525.895807][T25332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 19:22:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xe400) 19:22:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xefb50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:36 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2000006e}], 0x1}, 0x0) 19:22:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xc00) sendto$inet6(r0, &(0x7f0000000100)="61651330ad84fb3eaa6f1c1f8d94a4c357eba059b74b40b7ee38141c0d59167cb20207ba17031fc213a64034585106945d1aef14f5f9f1af4272b7a2692dcae1c562655932d40f3e768be54b6e67c68079bb5734ac1452edf4462b2a01b4ba56348f3495b6d079cfed0571b8f85306ca63188889cf15cebeded8c6ad", 0x7c, 0x48040, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x888}, 0x40844) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={r2, 0x2, 0x2, 0x7ff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) socket$nl_generic(0x10, 0x3, 0x10) [ 2525.904236][T25332] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2525.912262][T25332] [ 2525.928710][T25338] device 1175 entered promiscuous mode 19:22:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 21) 19:22:37 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x7ffff000}], 0x1}, 0x0) [ 2526.037072][T25350] FAULT_INJECTION: forcing a failure. [ 2526.037072][T25350] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.050214][T25350] CPU: 0 PID: 25350 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2526.058660][T25350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2526.068741][T25350] Call Trace: [ 2526.072041][T25350] [ 2526.074986][T25350] dump_stack_lvl+0xcd/0x134 [ 2526.079608][T25350] should_fail.cold+0x5/0xa [ 2526.084150][T25350] ? crypto_create_tfm_node+0x7f/0x320 [ 2526.089638][T25350] should_failslab+0x5/0x10 [ 2526.094167][T25350] __kmalloc_node+0x75/0x370 [ 2526.098800][T25350] crypto_create_tfm_node+0x7f/0x320 [ 2526.104118][T25350] crypto_alloc_tfm_node+0x107/0x260 [ 2526.109441][T25350] cryptd_alloc_aead+0x101/0x200 [ 2526.114413][T25350] ? cryptd_alloc_ahash+0x200/0x200 [ 2526.119656][T25350] ? __kmalloc_node+0x62/0x370 [ 2526.124466][T25350] simd_aead_init+0x67/0x1b0 [ 2526.129077][T25350] ? simd_aead_exit+0x40/0x40 [ 2526.133778][T25350] crypto_aead_init_tfm+0x138/0x1a0 [ 2526.139007][T25350] crypto_create_tfm_node+0x10d/0x320 [ 2526.144406][T25350] crypto_alloc_tfm_node+0x107/0x260 [ 2526.149724][T25350] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2526.155486][T25350] tipc_crypto_key_init+0x82/0x110 [ 2526.160628][T25350] ? tipc_ehdr_validate+0x240/0x240 [ 2526.165859][T25350] ? crypto_mod_put+0x8c/0x100 [ 2526.170663][T25350] tipc_nl_node_set_key+0xa5d/0xf70 [ 2526.175900][T25350] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2526.182178][T25350] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2526.188460][T25350] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2526.195872][T25350] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2526.203201][T25350] genl_family_rcv_msg_doit+0x228/0x320 [ 2526.208774][T25350] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2526.216172][T25350] ? mutex_lock_io_nested+0x1150/0x1150 [ 2526.221776][T25350] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2526.228093][T25350] ? __radix_tree_lookup+0x211/0x2a0 [ 2526.233403][T25350] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2526.239673][T25350] ? genl_get_cmd+0x3cf/0x480 [ 2526.244388][T25350] genl_rcv_msg+0x328/0x580 [ 2526.248922][T25350] ? genl_get_cmd+0x480/0x480 [ 2526.253630][T25350] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2526.259905][T25350] ? lock_release+0x720/0x720 [ 2526.264609][T25350] ? check_path.constprop.0+0x50/0x50 [ 2526.270014][T25350] netlink_rcv_skb+0x153/0x420 [ 2526.274804][T25350] ? genl_get_cmd+0x480/0x480 [ 2526.279607][T25350] ? netlink_ack+0xa60/0xa60 [ 2526.284228][T25350] ? netlink_deliver_tap+0x1b1/0xc30 [ 2526.289544][T25350] ? _copy_from_iter+0x12b/0x1320 [ 2526.294605][T25350] genl_rcv+0x24/0x40 [ 2526.298610][T25350] netlink_unicast+0x533/0x7d0 [ 2526.303406][T25350] ? netlink_attachskb+0x880/0x880 [ 2526.308542][T25350] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2526.314813][T25350] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2526.321080][T25350] ? __phys_addr_symbol+0x2c/0x70 [ 2526.326598][T25350] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2526.332342][T25350] ? __check_object_size+0x16e/0x3f0 [ 2526.337657][T25350] netlink_sendmsg+0x86d/0xda0 [ 2526.342456][T25350] ? netlink_unicast+0x7d0/0x7d0 [ 2526.347426][T25350] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2526.353699][T25350] ? netlink_unicast+0x7d0/0x7d0 [ 2526.358663][T25350] sock_sendmsg+0xcf/0x120 [ 2526.363109][T25350] ____sys_sendmsg+0x6e8/0x810 [ 2526.367908][T25350] ? kernel_sendmsg+0x50/0x50 [ 2526.372610][T25350] ? do_recvmmsg+0x6d0/0x6d0 [ 2526.377224][T25350] ? perf_trace_lock+0xeb/0x4d0 [ 2526.382096][T25350] ? lock_chain_count+0x20/0x20 [ 2526.386976][T25350] ? check_path.constprop.0+0x50/0x50 [ 2526.392386][T25350] ___sys_sendmsg+0xf3/0x170 [ 2526.396998][T25350] ? sendmsg_copy_msghdr+0x160/0x160 [ 2526.402308][T25350] ? __fget_files+0x21b/0x3e0 [ 2526.407013][T25350] ? lock_downgrade+0x6e0/0x6e0 [ 2526.411907][T25350] ? __fget_files+0x23d/0x3e0 [ 2526.416627][T25350] ? __fget_light+0xea/0x280 [ 2526.421251][T25350] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2526.427527][T25350] __sys_sendmsg+0xe5/0x1b0 [ 2526.432140][T25350] ? __sys_sendmsg_sock+0x30/0x30 [ 2526.437219][T25350] ? syscall_enter_from_user_mode+0x21/0x70 [ 2526.443141][T25350] do_syscall_64+0x35/0xb0 [ 2526.447588][T25350] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2526.453511][T25350] RIP: 0033:0x7f0a45f05ae9 [ 2526.457942][T25350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2526.477567][T25350] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:22:37 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2}, 0x0) 19:22:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xefc8dbfe}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xe502) [ 2526.485989][T25350] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2526.493959][T25350] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2526.501928][T25350] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2526.509894][T25350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2526.517862][T25350] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2526.525848][T25350] 19:22:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) [ 2526.649755][T25363] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2526.668426][T25363] device 1176 entered promiscuous mode [ 2526.675793][T25361] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 19:22:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 22) [ 2526.698712][T25361] device 2596 entered promiscuous mode [ 2526.735762][T25372] FAULT_INJECTION: forcing a failure. [ 2526.735762][T25372] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.748840][T25372] CPU: 0 PID: 25372 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2526.757330][T25372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2526.767407][T25372] Call Trace: [ 2526.770701][T25372] [ 2526.773650][T25372] dump_stack_lvl+0xcd/0x134 [ 2526.778274][T25372] should_fail.cold+0x5/0xa [ 2526.782817][T25372] ? crypto_create_tfm_node+0x7f/0x320 [ 2526.788301][T25372] should_failslab+0x5/0x10 [ 2526.792830][T25372] __kmalloc_node+0x75/0x370 [ 2526.797557][T25372] crypto_create_tfm_node+0x7f/0x320 [ 2526.802877][T25372] crypto_spawn_tfm2+0x60/0xb0 [ 2526.807668][T25372] ? cryptd_hash_init_tfm+0x120/0x120 [ 2526.813070][T25372] cryptd_aead_init_tfm+0x3c/0x140 [ 2526.818206][T25372] ? cryptd_hash_init_tfm+0x120/0x120 [ 2526.823615][T25372] crypto_aead_init_tfm+0x138/0x1a0 [ 2526.828844][T25372] crypto_create_tfm_node+0x10d/0x320 [ 2526.834252][T25372] crypto_alloc_tfm_node+0x107/0x260 [ 2526.839576][T25372] cryptd_alloc_aead+0x101/0x200 [ 2526.844545][T25372] ? cryptd_alloc_ahash+0x200/0x200 [ 2526.849778][T25372] ? __kmalloc_node+0x62/0x370 [ 2526.854589][T25372] simd_aead_init+0x67/0x1b0 [ 2526.859204][T25372] ? simd_aead_exit+0x40/0x40 [ 2526.863905][T25372] crypto_aead_init_tfm+0x138/0x1a0 [ 2526.869139][T25372] crypto_create_tfm_node+0x10d/0x320 [ 2526.874556][T25372] crypto_alloc_tfm_node+0x107/0x260 [ 2526.879874][T25372] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2526.885667][T25372] tipc_crypto_key_init+0x82/0x110 [ 2526.890799][T25372] ? tipc_ehdr_validate+0x240/0x240 [ 2526.896023][T25372] ? crypto_mod_put+0x8c/0x100 [ 2526.900817][T25372] tipc_nl_node_set_key+0xa5d/0xf70 [ 2526.906045][T25372] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2526.912425][T25372] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2526.918692][T25372] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2526.926095][T25372] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2526.933416][T25372] genl_family_rcv_msg_doit+0x228/0x320 [ 2526.939088][T25372] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2526.946572][T25372] ? mutex_lock_io_nested+0x1150/0x1150 [ 2526.952159][T25372] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2526.958426][T25372] ? __radix_tree_lookup+0x211/0x2a0 [ 2526.963746][T25372] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2526.970013][T25372] ? genl_get_cmd+0x3cf/0x480 [ 2526.974749][T25372] genl_rcv_msg+0x328/0x580 [ 2526.979291][T25372] ? genl_get_cmd+0x480/0x480 [ 2526.983996][T25372] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2526.990276][T25372] ? lock_release+0x720/0x720 [ 2526.994983][T25372] ? check_path.constprop.0+0x50/0x50 [ 2527.000383][T25372] netlink_rcv_skb+0x153/0x420 [ 2527.005179][T25372] ? genl_get_cmd+0x480/0x480 [ 2527.009884][T25372] ? netlink_ack+0xa60/0xa60 [ 2527.014509][T25372] ? netlink_deliver_tap+0x1b1/0xc30 [ 2527.019820][T25372] ? _copy_from_iter+0x12b/0x1320 [ 2527.024882][T25372] genl_rcv+0x24/0x40 [ 2527.028895][T25372] netlink_unicast+0x533/0x7d0 [ 2527.033688][T25372] ? netlink_attachskb+0x880/0x880 [ 2527.038823][T25372] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2527.044515][T25377] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2527.045091][T25372] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2527.059401][T25372] ? __phys_addr_symbol+0x2c/0x70 [ 2527.064453][T25372] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2527.070199][T25372] ? __check_object_size+0x16e/0x3f0 [ 2527.075514][T25372] netlink_sendmsg+0x86d/0xda0 [ 2527.080311][T25372] ? netlink_unicast+0x7d0/0x7d0 [ 2527.085282][T25372] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2527.091574][T25372] ? netlink_unicast+0x7d0/0x7d0 [ 2527.096536][T25372] sock_sendmsg+0xcf/0x120 [ 2527.100980][T25372] ____sys_sendmsg+0x6e8/0x810 [ 2527.105778][T25372] ? kernel_sendmsg+0x50/0x50 [ 2527.110482][T25372] ? do_recvmmsg+0x6d0/0x6d0 [ 2527.115094][T25372] ? perf_trace_lock+0xeb/0x4d0 [ 2527.119984][T25372] ? lock_chain_count+0x20/0x20 [ 2527.124859][T25372] ? check_path.constprop.0+0x50/0x50 [ 2527.130261][T25372] ___sys_sendmsg+0xf3/0x170 [ 2527.134959][T25372] ? sendmsg_copy_msghdr+0x160/0x160 [ 2527.140269][T25372] ? __fget_files+0x21b/0x3e0 [ 2527.144974][T25372] ? lock_downgrade+0x6e0/0x6e0 [ 2527.149857][T25372] ? __fget_files+0x23d/0x3e0 [ 2527.154560][T25372] ? __fget_light+0xea/0x280 [ 2527.159178][T25372] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2527.165451][T25372] __sys_sendmsg+0xe5/0x1b0 [ 2527.169962][T25372] ? __sys_sendmsg_sock+0x30/0x30 [ 2527.175001][T25372] ? syscall_enter_from_user_mode+0x21/0x70 [ 2527.180905][T25372] do_syscall_64+0x35/0xb0 [ 2527.185323][T25372] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2527.191406][T25372] RIP: 0033:0x7f0a45f05ae9 [ 2527.195823][T25372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2527.215452][T25372] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2527.223867][T25372] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 19:22:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5203}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xe603) [ 2527.231839][T25372] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2527.239804][T25372] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2527.247771][T25372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2527.255739][T25372] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2527.263729][T25372] 19:22:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 23) [ 2527.307891][T25377] device 2597 entered promiscuous mode [ 2527.351393][T25382] FAULT_INJECTION: forcing a failure. [ 2527.351393][T25382] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.364338][T25382] CPU: 0 PID: 25382 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2527.372781][T25382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2527.382856][T25382] Call Trace: [ 2527.386149][T25382] [ 2527.389088][T25382] dump_stack_lvl+0xcd/0x134 [ 2527.393705][T25382] should_fail.cold+0x5/0xa [ 2527.398326][T25382] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2527.404244][T25382] should_failslab+0x5/0x10 [ 2527.408777][T25382] kmem_cache_alloc_trace+0x55/0x2b0 [ 2527.414082][T25382] ? crypto_aead_setkey+0x10f/0x290 [ 2527.419310][T25382] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2527.425074][T25382] tipc_crypto_key_init+0x82/0x110 [ 2527.430220][T25382] ? tipc_ehdr_validate+0x240/0x240 [ 2527.435444][T25382] ? crypto_mod_put+0x8c/0x100 [ 2527.440241][T25382] tipc_nl_node_set_key+0xa5d/0xf70 [ 2527.445469][T25382] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2527.451753][T25382] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2527.458023][T25382] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2527.465430][T25382] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2527.472753][T25382] genl_family_rcv_msg_doit+0x228/0x320 [ 2527.478329][T25382] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2527.485726][T25382] ? mutex_lock_io_nested+0x1150/0x1150 [ 2527.491308][T25382] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2527.497587][T25382] ? __radix_tree_lookup+0x211/0x2a0 [ 2527.502896][T25382] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2527.509167][T25382] ? genl_get_cmd+0x3cf/0x480 [ 2527.513875][T25382] genl_rcv_msg+0x328/0x580 [ 2527.518414][T25382] ? genl_get_cmd+0x480/0x480 [ 2527.523117][T25382] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2527.529388][T25382] ? lock_release+0x720/0x720 [ 2527.534088][T25382] ? check_path.constprop.0+0x50/0x50 [ 2527.539491][T25382] netlink_rcv_skb+0x153/0x420 [ 2527.544285][T25382] ? genl_get_cmd+0x480/0x480 [ 2527.548997][T25382] ? netlink_ack+0xa60/0xa60 [ 2527.553629][T25382] ? netlink_deliver_tap+0x1b1/0xc30 [ 2527.558937][T25382] ? _copy_from_iter+0x12b/0x1320 [ 2527.564079][T25382] genl_rcv+0x24/0x40 [ 2527.568096][T25382] netlink_unicast+0x533/0x7d0 [ 2527.572889][T25382] ? netlink_attachskb+0x880/0x880 [ 2527.578014][T25382] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2527.584293][T25382] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2527.590556][T25382] ? __phys_addr_symbol+0x2c/0x70 [ 2527.595602][T25382] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2527.601347][T25382] ? __check_object_size+0x16e/0x3f0 [ 2527.606660][T25382] netlink_sendmsg+0x86d/0xda0 [ 2527.611552][T25382] ? netlink_unicast+0x7d0/0x7d0 [ 2527.616530][T25382] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2527.622797][T25382] ? netlink_unicast+0x7d0/0x7d0 [ 2527.627762][T25382] sock_sendmsg+0xcf/0x120 [ 2527.632207][T25382] ____sys_sendmsg+0x6e8/0x810 [ 2527.637002][T25382] ? kernel_sendmsg+0x50/0x50 [ 2527.641707][T25382] ? do_recvmmsg+0x6d0/0x6d0 [ 2527.646320][T25382] ? perf_trace_lock+0xeb/0x4d0 [ 2527.651192][T25382] ? lock_chain_count+0x20/0x20 [ 2527.656076][T25382] ? check_path.constprop.0+0x50/0x50 [ 2527.661475][T25382] ___sys_sendmsg+0xf3/0x170 [ 2527.666088][T25382] ? sendmsg_copy_msghdr+0x160/0x160 [ 2527.671400][T25382] ? __fget_files+0x21b/0x3e0 [ 2527.676105][T25382] ? lock_downgrade+0x6e0/0x6e0 [ 2527.680994][T25382] ? __fget_files+0x23d/0x3e0 [ 2527.685715][T25382] ? __fget_light+0xea/0x280 [ 2527.690332][T25382] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2527.696607][T25382] __sys_sendmsg+0xe5/0x1b0 [ 2527.701130][T25382] ? __sys_sendmsg_sock+0x30/0x30 [ 2527.706194][T25382] ? syscall_enter_from_user_mode+0x21/0x70 [ 2527.712114][T25382] do_syscall_64+0x35/0xb0 [ 2527.716557][T25382] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2527.722502][T25382] RIP: 0033:0x7f0a45f05ae9 [ 2527.726933][T25382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:22:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:38 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3}, 0x0) 19:22:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xee03) [ 2527.746555][T25382] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2527.754989][T25382] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2527.762984][T25382] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2527.770981][T25382] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2527.778974][T25382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2527.787050][T25382] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2527.795094][T25382] 19:22:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 24) [ 2527.857426][T25394] FAULT_INJECTION: forcing a failure. [ 2527.857426][T25394] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.866811][T25392] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2527.870369][T25394] CPU: 0 PID: 25394 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2527.886712][T25394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2527.896781][T25394] Call Trace: [ 2527.900071][T25394] [ 2527.903014][T25394] dump_stack_lvl+0xcd/0x134 [ 2527.907628][T25394] should_fail.cold+0x5/0xa [ 2527.912164][T25394] ? crypto_create_tfm_node+0x7f/0x320 [ 2527.917646][T25394] should_failslab+0x5/0x10 [ 2527.922178][T25394] __kmalloc_node+0x75/0x370 [ 2527.926804][T25394] crypto_create_tfm_node+0x7f/0x320 [ 2527.932119][T25394] crypto_alloc_tfm_node+0x107/0x260 [ 2527.937442][T25394] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2527.943206][T25394] tipc_crypto_key_init+0x82/0x110 [ 2527.948338][T25394] ? tipc_ehdr_validate+0x240/0x240 [ 2527.953553][T25394] ? crypto_mod_put+0x8c/0x100 [ 2527.958352][T25394] tipc_nl_node_set_key+0xa5d/0xf70 [ 2527.963583][T25394] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2527.969858][T25394] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2527.976126][T25394] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2527.983531][T25394] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2527.990853][T25394] genl_family_rcv_msg_doit+0x228/0x320 [ 2527.996433][T25394] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2528.003827][T25394] ? mutex_lock_io_nested+0x1150/0x1150 [ 2528.009416][T25394] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2528.015684][T25394] ? __radix_tree_lookup+0x211/0x2a0 [ 2528.020998][T25394] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2528.027263][T25394] ? genl_get_cmd+0x3cf/0x480 [ 2528.031976][T25394] genl_rcv_msg+0x328/0x580 [ 2528.036513][T25394] ? genl_get_cmd+0x480/0x480 [ 2528.041217][T25394] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2528.047491][T25394] ? lock_release+0x720/0x720 [ 2528.052199][T25394] ? check_path.constprop.0+0x50/0x50 [ 2528.057599][T25394] netlink_rcv_skb+0x153/0x420 [ 2528.062390][T25394] ? genl_get_cmd+0x480/0x480 [ 2528.067182][T25394] ? netlink_ack+0xa60/0xa60 [ 2528.071806][T25394] ? netlink_deliver_tap+0x1b1/0xc30 [ 2528.077113][T25394] ? _copy_from_iter+0x12b/0x1320 [ 2528.082182][T25394] genl_rcv+0x24/0x40 [ 2528.086192][T25394] netlink_unicast+0x533/0x7d0 [ 2528.090988][T25394] ? netlink_attachskb+0x880/0x880 [ 2528.096124][T25394] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2528.102396][T25394] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2528.108729][T25394] ? __phys_addr_symbol+0x2c/0x70 [ 2528.113867][T25394] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2528.119612][T25394] ? __check_object_size+0x16e/0x3f0 [ 2528.124938][T25394] netlink_sendmsg+0x86d/0xda0 [ 2528.129834][T25394] ? netlink_unicast+0x7d0/0x7d0 [ 2528.134808][T25394] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2528.141084][T25394] ? netlink_unicast+0x7d0/0x7d0 [ 2528.146048][T25394] sock_sendmsg+0xcf/0x120 [ 2528.150496][T25394] ____sys_sendmsg+0x6e8/0x810 [ 2528.155284][T25394] ? kernel_sendmsg+0x50/0x50 [ 2528.159990][T25394] ? do_recvmmsg+0x6d0/0x6d0 [ 2528.164662][T25394] ? perf_trace_lock+0xeb/0x4d0 [ 2528.169537][T25394] ? lock_chain_count+0x20/0x20 [ 2528.174424][T25394] ? check_path.constprop.0+0x50/0x50 [ 2528.179820][T25394] ___sys_sendmsg+0xf3/0x170 [ 2528.184422][T25394] ? sendmsg_copy_msghdr+0x160/0x160 [ 2528.189735][T25394] ? __fget_files+0x21b/0x3e0 [ 2528.194434][T25394] ? lock_downgrade+0x6e0/0x6e0 [ 2528.199326][T25394] ? __fget_files+0x23d/0x3e0 [ 2528.204040][T25394] ? __fget_light+0xea/0x280 [ 2528.208656][T25394] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2528.214930][T25394] __sys_sendmsg+0xe5/0x1b0 [ 2528.219458][T25394] ? __sys_sendmsg_sock+0x30/0x30 [ 2528.224522][T25394] ? syscall_enter_from_user_mode+0x21/0x70 [ 2528.230442][T25394] do_syscall_64+0x35/0xb0 [ 2528.234884][T25394] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2528.240801][T25394] RIP: 0033:0x7f0a45f05ae9 19:22:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5b1e}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf1b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:39 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xf000) 19:22:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 25) [ 2528.245238][T25394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.255741][T25402] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2528.264861][T25394] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2528.264892][T25394] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2528.264912][T25394] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2528.264931][T25394] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.264949][T25394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2528.264967][T25394] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2528.265006][T25394] [ 2528.327925][T25404] FAULT_INJECTION: forcing a failure. [ 2528.327925][T25404] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.340644][T25404] CPU: 0 PID: 25404 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2528.349073][T25404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2528.359144][T25404] Call Trace: [ 2528.362443][T25404] [ 2528.365391][T25404] dump_stack_lvl+0xcd/0x134 [ 2528.370020][T25404] should_fail.cold+0x5/0xa [ 2528.374562][T25404] ? crypto_create_tfm_node+0x7f/0x320 [ 2528.380049][T25404] should_failslab+0x5/0x10 [ 2528.384581][T25404] __kmalloc_node+0x75/0x370 [ 2528.389289][T25404] crypto_create_tfm_node+0x7f/0x320 [ 2528.394607][T25404] crypto_alloc_tfm_node+0x107/0x260 [ 2528.399930][T25404] cryptd_alloc_aead+0x101/0x200 [ 2528.404899][T25404] ? cryptd_alloc_ahash+0x200/0x200 [ 2528.410133][T25404] ? __kmalloc_node+0x62/0x370 [ 2528.414947][T25404] simd_aead_init+0x67/0x1b0 [ 2528.419559][T25404] ? simd_aead_exit+0x40/0x40 [ 2528.424255][T25404] crypto_aead_init_tfm+0x138/0x1a0 [ 2528.429486][T25404] crypto_create_tfm_node+0x10d/0x320 [ 2528.434885][T25404] crypto_alloc_tfm_node+0x107/0x260 [ 2528.440201][T25404] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2528.445966][T25404] tipc_crypto_key_init+0x82/0x110 [ 2528.451109][T25404] ? tipc_ehdr_validate+0x240/0x240 [ 2528.456334][T25404] ? crypto_mod_put+0x8c/0x100 [ 2528.461115][T25404] tipc_nl_node_set_key+0xa5d/0xf70 [ 2528.466327][T25404] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2528.472578][T25404] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2528.478823][T25404] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2528.486470][T25404] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2528.493764][T25404] genl_family_rcv_msg_doit+0x228/0x320 [ 2528.499315][T25404] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2528.506691][T25404] ? mutex_lock_io_nested+0x1150/0x1150 [ 2528.512251][T25404] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2528.518496][T25404] ? __radix_tree_lookup+0x211/0x2a0 [ 2528.523893][T25404] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2528.530135][T25404] ? genl_get_cmd+0x3cf/0x480 [ 2528.534825][T25404] genl_rcv_msg+0x328/0x580 [ 2528.539340][T25404] ? genl_get_cmd+0x480/0x480 [ 2528.544018][T25404] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2528.550264][T25404] ? lock_release+0x720/0x720 [ 2528.554940][T25404] ? check_path.constprop.0+0x50/0x50 [ 2528.560318][T25404] netlink_rcv_skb+0x153/0x420 [ 2528.565090][T25404] ? genl_get_cmd+0x480/0x480 [ 2528.569774][T25404] ? netlink_ack+0xa60/0xa60 [ 2528.574373][T25404] ? netlink_deliver_tap+0x1b1/0xc30 [ 2528.579658][T25404] ? _copy_from_iter+0x12b/0x1320 [ 2528.584691][T25404] genl_rcv+0x24/0x40 [ 2528.588673][T25404] netlink_unicast+0x533/0x7d0 [ 2528.593441][T25404] ? netlink_attachskb+0x880/0x880 [ 2528.598554][T25404] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2528.604799][T25404] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2528.611065][T25404] ? __phys_addr_symbol+0x2c/0x70 [ 2528.616092][T25404] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2528.621835][T25404] ? __check_object_size+0x16e/0x3f0 [ 2528.627210][T25404] netlink_sendmsg+0x86d/0xda0 [ 2528.631982][T25404] ? netlink_unicast+0x7d0/0x7d0 [ 2528.636928][T25404] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2528.643170][T25404] ? netlink_unicast+0x7d0/0x7d0 [ 2528.648115][T25404] sock_sendmsg+0xcf/0x120 [ 2528.652547][T25404] ____sys_sendmsg+0x6e8/0x810 [ 2528.657318][T25404] ? kernel_sendmsg+0x50/0x50 [ 2528.662000][T25404] ? do_recvmmsg+0x6d0/0x6d0 [ 2528.666592][T25404] ? perf_trace_lock+0xeb/0x4d0 [ 2528.671491][T25404] ? lock_chain_count+0x20/0x20 [ 2528.676346][T25404] ? check_path.constprop.0+0x50/0x50 [ 2528.681725][T25404] ___sys_sendmsg+0xf3/0x170 [ 2528.686317][T25404] ? sendmsg_copy_msghdr+0x160/0x160 [ 2528.691622][T25404] ? __fget_files+0x21b/0x3e0 [ 2528.696304][T25404] ? lock_downgrade+0x6e0/0x6e0 [ 2528.701168][T25404] ? __fget_files+0x23d/0x3e0 [ 2528.705851][T25404] ? __fget_light+0xea/0x280 [ 2528.710466][T25404] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2528.716714][T25404] __sys_sendmsg+0xe5/0x1b0 [ 2528.721229][T25404] ? __sys_sendmsg_sock+0x30/0x30 [ 2528.726266][T25404] ? syscall_enter_from_user_mode+0x21/0x70 [ 2528.732168][T25404] do_syscall_64+0x35/0xb0 [ 2528.736587][T25404] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2528.742489][T25404] RIP: 0033:0x7f0a45f05ae9 [ 2528.746928][T25404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.766556][T25404] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2528.774982][T25404] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2528.782958][T25404] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2528.790923][T25404] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.798891][T25404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 19:22:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 26) [ 2528.807119][T25404] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2528.815120][T25404] [ 2528.821509][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.827820][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 [ 2528.834453][T25392] device 2598 entered promiscuous mode [ 2528.890547][T25410] FAULT_INJECTION: forcing a failure. [ 2528.890547][T25410] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.903289][T25410] CPU: 0 PID: 25410 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2528.911727][T25410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2528.921815][T25410] Call Trace: [ 2528.922023][T25412] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2528.925103][T25410] [ 2528.925118][T25410] dump_stack_lvl+0xcd/0x134 [ 2528.925154][T25410] should_fail.cold+0x5/0xa [ 2528.925192][T25410] ? crypto_create_tfm_node+0x7f/0x320 [ 2528.950702][T25410] should_failslab+0x5/0x10 [ 2528.955238][T25410] __kmalloc_node+0x75/0x370 [ 2528.959864][T25410] crypto_create_tfm_node+0x7f/0x320 [ 2528.965180][T25410] crypto_spawn_tfm2+0x60/0xb0 [ 2528.969973][T25410] ? cryptd_hash_init_tfm+0x120/0x120 [ 2528.975375][T25410] cryptd_aead_init_tfm+0x3c/0x140 [ 2528.980516][T25410] ? cryptd_hash_init_tfm+0x120/0x120 [ 2528.985917][T25410] crypto_aead_init_tfm+0x138/0x1a0 [ 2528.991154][T25410] crypto_create_tfm_node+0x10d/0x320 [ 2528.996556][T25410] crypto_alloc_tfm_node+0x107/0x260 [ 2529.001881][T25410] cryptd_alloc_aead+0x101/0x200 [ 2529.006873][T25410] ? cryptd_alloc_ahash+0x200/0x200 [ 2529.012107][T25410] ? __kmalloc_node+0x62/0x370 [ 2529.016920][T25410] simd_aead_init+0x67/0x1b0 [ 2529.021533][T25410] ? simd_aead_exit+0x40/0x40 [ 2529.026238][T25410] crypto_aead_init_tfm+0x138/0x1a0 [ 2529.031474][T25410] crypto_create_tfm_node+0x10d/0x320 [ 2529.036873][T25410] crypto_alloc_tfm_node+0x107/0x260 [ 2529.042189][T25410] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2529.047954][T25410] tipc_crypto_key_init+0x82/0x110 [ 2529.053094][T25410] ? tipc_ehdr_validate+0x240/0x240 [ 2529.058315][T25410] ? crypto_mod_put+0x8c/0x100 [ 2529.063113][T25410] tipc_nl_node_set_key+0xa5d/0xf70 [ 2529.068487][T25410] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2529.074770][T25410] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2529.081038][T25410] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2529.088440][T25410] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2529.095767][T25410] genl_family_rcv_msg_doit+0x228/0x320 [ 2529.101350][T25410] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2529.108759][T25410] ? mutex_lock_io_nested+0x1150/0x1150 [ 2529.114352][T25410] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2529.120633][T25410] ? __radix_tree_lookup+0x211/0x2a0 [ 2529.125946][T25410] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2529.132208][T25410] ? genl_get_cmd+0x3cf/0x480 [ 2529.136914][T25410] genl_rcv_msg+0x328/0x580 [ 2529.141460][T25410] ? genl_get_cmd+0x480/0x480 [ 2529.146166][T25410] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2529.152449][T25410] ? lock_release+0x720/0x720 [ 2529.157152][T25410] ? check_path.constprop.0+0x50/0x50 [ 2529.162609][T25410] netlink_rcv_skb+0x153/0x420 [ 2529.167406][T25410] ? genl_get_cmd+0x480/0x480 [ 2529.172123][T25410] ? netlink_ack+0xa60/0xa60 [ 2529.176751][T25410] ? netlink_deliver_tap+0x1b1/0xc30 [ 2529.182067][T25410] ? _copy_from_iter+0x12b/0x1320 [ 2529.187127][T25410] genl_rcv+0x24/0x40 [ 2529.191134][T25410] netlink_unicast+0x533/0x7d0 [ 2529.195933][T25410] ? netlink_attachskb+0x880/0x880 [ 2529.201072][T25410] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2529.207339][T25410] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2529.213606][T25410] ? __phys_addr_symbol+0x2c/0x70 [ 2529.218648][T25410] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2529.224393][T25410] ? __check_object_size+0x16e/0x3f0 [ 2529.229811][T25410] netlink_sendmsg+0x86d/0xda0 [ 2529.234611][T25410] ? netlink_unicast+0x7d0/0x7d0 [ 2529.239578][T25410] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2529.245857][T25410] ? netlink_unicast+0x7d0/0x7d0 [ 2529.250952][T25410] sock_sendmsg+0xcf/0x120 [ 2529.255430][T25410] ____sys_sendmsg+0x6e8/0x810 [ 2529.260229][T25410] ? kernel_sendmsg+0x50/0x50 [ 2529.264935][T25410] ? do_recvmmsg+0x6d0/0x6d0 [ 2529.269553][T25410] ? perf_trace_lock+0xeb/0x4d0 [ 2529.274431][T25410] ? lock_chain_count+0x20/0x20 [ 2529.279317][T25410] ? check_path.constprop.0+0x50/0x50 [ 2529.284721][T25410] ___sys_sendmsg+0xf3/0x170 [ 2529.289342][T25410] ? sendmsg_copy_msghdr+0x160/0x160 [ 2529.294668][T25410] ? __fget_files+0x21b/0x3e0 [ 2529.299375][T25410] ? lock_downgrade+0x6e0/0x6e0 [ 2529.304277][T25410] ? __fget_files+0x23d/0x3e0 [ 2529.308995][T25410] ? __fget_light+0xea/0x280 [ 2529.313619][T25410] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2529.319913][T25410] __sys_sendmsg+0xe5/0x1b0 [ 2529.324439][T25410] ? __sys_sendmsg_sock+0x30/0x30 [ 2529.329496][T25410] ? syscall_enter_from_user_mode+0x21/0x70 [ 2529.335423][T25410] do_syscall_64+0x35/0xb0 [ 2529.339867][T25410] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2529.345791][T25410] RIP: 0033:0x7f0a45f05ae9 [ 2529.350346][T25410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2529.370065][T25410] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2529.378507][T25410] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 19:22:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf2b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2529.386607][T25410] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2529.394595][T25410] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2529.402586][T25410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2529.410573][T25410] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2529.418585][T25410] [ 2529.436219][T25412] device 2599 entered promiscuous mode [ 2529.480008][T25402] device 1177 entered promiscuous mode 19:22:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 27) [ 2529.564281][T25428] FAULT_INJECTION: forcing a failure. [ 2529.564281][T25428] name failslab, interval 1, probability 0, space 0, times 0 [ 2529.577053][T25428] CPU: 0 PID: 25428 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2529.585491][T25428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2529.595559][T25428] Call Trace: [ 2529.598847][T25428] [ 2529.601790][T25428] dump_stack_lvl+0xcd/0x134 [ 2529.606402][T25428] should_fail.cold+0x5/0xa [ 2529.610941][T25428] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2529.616857][T25428] should_failslab+0x5/0x10 [ 2529.621387][T25428] kmem_cache_alloc_trace+0x55/0x2b0 [ 2529.626708][T25428] ? crypto_aead_setkey+0x10f/0x290 [ 2529.631941][T25428] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2529.637702][T25428] tipc_crypto_key_init+0x82/0x110 [ 2529.642852][T25428] ? tipc_ehdr_validate+0x240/0x240 [ 2529.648075][T25428] ? crypto_mod_put+0x8c/0x100 [ 2529.652957][T25428] tipc_nl_node_set_key+0xa5d/0xf70 [ 2529.658188][T25428] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2529.664623][T25428] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2529.670884][T25428] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2529.678309][T25428] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2529.685633][T25428] genl_family_rcv_msg_doit+0x228/0x320 [ 2529.691214][T25428] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2529.698616][T25428] ? mutex_lock_io_nested+0x1150/0x1150 [ 2529.704200][T25428] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2529.710477][T25428] ? __radix_tree_lookup+0x211/0x2a0 [ 2529.715786][T25428] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2529.722057][T25428] ? genl_get_cmd+0x3cf/0x480 [ 2529.726756][T25428] genl_rcv_msg+0x328/0x580 [ 2529.731282][T25428] ? genl_get_cmd+0x480/0x480 [ 2529.735996][T25428] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2529.742267][T25428] ? lock_release+0x720/0x720 [ 2529.746965][T25428] ? check_path.constprop.0+0x50/0x50 [ 2529.752368][T25428] netlink_rcv_skb+0x153/0x420 [ 2529.757159][T25428] ? genl_get_cmd+0x480/0x480 [ 2529.761865][T25428] ? netlink_ack+0xa60/0xa60 [ 2529.766482][T25428] ? netlink_deliver_tap+0x1b1/0xc30 [ 2529.771786][T25428] ? _copy_from_iter+0x12b/0x1320 [ 2529.776836][T25428] genl_rcv+0x24/0x40 [ 2529.780843][T25428] netlink_unicast+0x533/0x7d0 [ 2529.785634][T25428] ? netlink_attachskb+0x880/0x880 [ 2529.790762][T25428] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2529.797032][T25428] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2529.803297][T25428] ? __phys_addr_symbol+0x2c/0x70 [ 2529.808342][T25428] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2529.814089][T25428] ? __check_object_size+0x16e/0x3f0 [ 2529.819402][T25428] netlink_sendmsg+0x86d/0xda0 [ 2529.824195][T25428] ? netlink_unicast+0x7d0/0x7d0 [ 2529.829164][T25428] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2529.835440][T25428] ? netlink_unicast+0x7d0/0x7d0 [ 2529.840406][T25428] sock_sendmsg+0xcf/0x120 [ 2529.844850][T25428] ____sys_sendmsg+0x6e8/0x810 [ 2529.849641][T25428] ? kernel_sendmsg+0x50/0x50 [ 2529.854341][T25428] ? do_recvmmsg+0x6d0/0x6d0 [ 2529.858957][T25428] ? perf_trace_lock+0xeb/0x4d0 [ 2529.863830][T25428] ? lock_chain_count+0x20/0x20 [ 2529.868715][T25428] ? check_path.constprop.0+0x50/0x50 [ 2529.874117][T25428] ___sys_sendmsg+0xf3/0x170 [ 2529.878732][T25428] ? sendmsg_copy_msghdr+0x160/0x160 [ 2529.884044][T25428] ? __fget_files+0x21b/0x3e0 [ 2529.888747][T25428] ? lock_downgrade+0x6e0/0x6e0 [ 2529.893636][T25428] ? __fget_files+0x23d/0x3e0 [ 2529.898351][T25428] ? __fget_light+0xea/0x280 [ 2529.902969][T25428] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2529.909237][T25428] __sys_sendmsg+0xe5/0x1b0 [ 2529.913766][T25428] ? __sys_sendmsg_sock+0x30/0x30 [ 2529.918830][T25428] ? syscall_enter_from_user_mode+0x21/0x70 [ 2529.924749][T25428] do_syscall_64+0x35/0xb0 [ 2529.929186][T25428] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2529.935099][T25428] RIP: 0033:0x7f0a45f05ae9 [ 2529.939531][T25428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:22:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf3b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:41 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x4}, 0x0) 19:22:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000050) 19:22:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xf203) [ 2529.959155][T25428] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2529.967586][T25428] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2529.975571][T25428] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2529.983564][T25428] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2529.991553][T25428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2529.999543][T25428] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2530.007550][T25428] 19:22:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 28) 19:22:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b1a000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xbc, 0x4, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x195e546e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x703c20c1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe51b8c7}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4c459784}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0xbc}}, 0x5) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x40004) [ 2530.081278][T25440] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2530.104132][T25440] device 2600 entered promiscuous mode [ 2530.166431][T25445] FAULT_INJECTION: forcing a failure. [ 2530.166431][T25445] name failslab, interval 1, probability 0, space 0, times 0 [ 2530.179345][T25445] CPU: 0 PID: 25445 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2530.187782][T25445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2530.197849][T25445] Call Trace: [ 2530.201136][T25445] [ 2530.204077][T25445] dump_stack_lvl+0xcd/0x134 [ 2530.208692][T25445] should_fail.cold+0x5/0xa [ 2530.213229][T25445] ? crypto_create_tfm_node+0x7f/0x320 [ 2530.218710][T25445] should_failslab+0x5/0x10 [ 2530.223232][T25445] __kmalloc_node+0x75/0x370 [ 2530.227852][T25445] crypto_create_tfm_node+0x7f/0x320 [ 2530.233163][T25445] crypto_alloc_tfm_node+0x107/0x260 [ 2530.238478][T25445] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2530.244238][T25445] tipc_crypto_key_init+0x82/0x110 [ 2530.249376][T25445] ? tipc_ehdr_validate+0x240/0x240 [ 2530.254594][T25445] ? crypto_mod_put+0x8c/0x100 [ 2530.259383][T25445] tipc_nl_node_set_key+0xa5d/0xf70 [ 2530.264613][T25445] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2530.270888][T25445] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2530.277152][T25445] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2530.284547][T25445] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2530.291861][T25445] genl_family_rcv_msg_doit+0x228/0x320 [ 2530.297447][T25445] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2530.304838][T25445] ? mutex_lock_io_nested+0x1150/0x1150 [ 2530.310504][T25445] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2530.316768][T25445] ? __radix_tree_lookup+0x211/0x2a0 [ 2530.322080][T25445] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2530.328344][T25445] ? genl_get_cmd+0x3cf/0x480 [ 2530.333047][T25445] genl_rcv_msg+0x328/0x580 [ 2530.337581][T25445] ? genl_get_cmd+0x480/0x480 [ 2530.342286][T25445] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2530.348553][T25445] ? lock_release+0x720/0x720 [ 2530.353247][T25445] ? check_path.constprop.0+0x50/0x50 [ 2530.358653][T25445] netlink_rcv_skb+0x153/0x420 [ 2530.363439][T25445] ? genl_get_cmd+0x480/0x480 [ 2530.368135][T25445] ? netlink_ack+0xa60/0xa60 [ 2530.372748][T25445] ? netlink_deliver_tap+0x1b1/0xc30 [ 2530.378048][T25445] ? _copy_from_iter+0x12b/0x1320 [ 2530.383101][T25445] genl_rcv+0x24/0x40 [ 2530.387102][T25445] netlink_unicast+0x533/0x7d0 [ 2530.391892][T25445] ? netlink_attachskb+0x880/0x880 [ 2530.397023][T25445] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2530.403289][T25445] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2530.409558][T25445] ? __phys_addr_symbol+0x2c/0x70 [ 2530.414602][T25445] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2530.420340][T25445] ? __check_object_size+0x16e/0x3f0 [ 2530.425826][T25445] netlink_sendmsg+0x86d/0xda0 [ 2530.430628][T25445] ? netlink_unicast+0x7d0/0x7d0 [ 2530.435598][T25445] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2530.441863][T25445] ? netlink_unicast+0x7d0/0x7d0 [ 2530.446822][T25445] sock_sendmsg+0xcf/0x120 [ 2530.451262][T25445] ____sys_sendmsg+0x6e8/0x810 [ 2530.456079][T25445] ? kernel_sendmsg+0x50/0x50 [ 2530.460778][T25445] ? do_recvmmsg+0x6d0/0x6d0 [ 2530.465403][T25445] ? perf_trace_lock+0xeb/0x4d0 [ 2530.466514][T25454] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2530.470266][T25445] ? lock_chain_count+0x20/0x20 [ 2530.470312][T25445] ? check_path.constprop.0+0x50/0x50 [ 2530.470349][T25445] ___sys_sendmsg+0xf3/0x170 [ 2530.470380][T25445] ? sendmsg_copy_msghdr+0x160/0x160 [ 2530.470412][T25445] ? __fget_files+0x21b/0x3e0 [ 2530.470441][T25445] ? lock_downgrade+0x6e0/0x6e0 [ 2530.470488][T25445] ? __fget_files+0x23d/0x3e0 [ 2530.470525][T25445] ? __fget_light+0xea/0x280 [ 2530.517355][T25445] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2530.523629][T25445] __sys_sendmsg+0xe5/0x1b0 [ 2530.528219][T25445] ? __sys_sendmsg_sock+0x30/0x30 [ 2530.533278][T25445] ? syscall_enter_from_user_mode+0x21/0x70 [ 2530.539196][T25445] do_syscall_64+0x35/0xb0 [ 2530.543633][T25445] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2530.549547][T25445] RIP: 0033:0x7f0a45f05ae9 [ 2530.553974][T25445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2530.573599][T25445] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2530.582030][T25445] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2530.590018][T25445] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2530.597999][T25445] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2530.605981][T25445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 19:22:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf4b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xf403) 19:22:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xfa03) [ 2530.613968][T25445] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2530.621962][T25445] [ 2530.638803][T25454] device 2601 entered promiscuous mode 19:22:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 29) [ 2530.817817][T25461] FAULT_INJECTION: forcing a failure. [ 2530.817817][T25461] name failslab, interval 1, probability 0, space 0, times 0 [ 2530.830710][T25461] CPU: 0 PID: 25461 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 2530.839140][T25461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2530.849210][T25461] Call Trace: [ 2530.852504][T25461] [ 2530.855446][T25461] dump_stack_lvl+0xcd/0x134 [ 2530.860065][T25461] should_fail.cold+0x5/0xa [ 2530.864599][T25461] ? crypto_create_tfm_node+0x7f/0x320 [ 2530.870081][T25461] should_failslab+0x5/0x10 [ 2530.874606][T25461] __kmalloc_node+0x75/0x370 [ 2530.879227][T25461] crypto_create_tfm_node+0x7f/0x320 [ 2530.884540][T25461] crypto_alloc_tfm_node+0x107/0x260 [ 2530.889857][T25461] cryptd_alloc_aead+0x101/0x200 [ 2530.894818][T25461] ? cryptd_alloc_ahash+0x200/0x200 [ 2530.900045][T25461] ? __kmalloc_node+0x62/0x370 [ 2530.904848][T25461] simd_aead_init+0x67/0x1b0 [ 2530.909457][T25461] ? simd_aead_exit+0x40/0x40 [ 2530.914147][T25461] crypto_aead_init_tfm+0x138/0x1a0 [ 2530.919379][T25461] crypto_create_tfm_node+0x10d/0x320 [ 2530.924872][T25461] crypto_alloc_tfm_node+0x107/0x260 [ 2530.930187][T25461] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2530.935943][T25461] tipc_crypto_key_init+0x82/0x110 [ 2530.941080][T25461] ? tipc_ehdr_validate+0x240/0x240 [ 2530.946306][T25461] ? crypto_mod_put+0x8c/0x100 [ 2530.951099][T25461] tipc_nl_node_set_key+0xa5d/0xf70 [ 2530.956325][T25461] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2530.962595][T25461] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2530.968861][T25461] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2530.976257][T25461] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2530.983577][T25461] genl_family_rcv_msg_doit+0x228/0x320 [ 2530.989142][T25461] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2530.996539][T25461] ? mutex_lock_io_nested+0x1150/0x1150 [ 2531.002123][T25461] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2531.008387][T25461] ? __radix_tree_lookup+0x211/0x2a0 [ 2531.013725][T25461] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2531.020002][T25461] ? genl_get_cmd+0x3cf/0x480 [ 2531.024955][T25461] genl_rcv_msg+0x328/0x580 [ 2531.029489][T25461] ? genl_get_cmd+0x480/0x480 [ 2531.034190][T25461] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2531.040463][T25461] ? lock_release+0x720/0x720 [ 2531.045167][T25461] ? check_path.constprop.0+0x50/0x50 [ 2531.050568][T25461] netlink_rcv_skb+0x153/0x420 [ 2531.055358][T25461] ? genl_get_cmd+0x480/0x480 [ 2531.060064][T25461] ? netlink_ack+0xa60/0xa60 [ 2531.064686][T25461] ? netlink_deliver_tap+0x1b1/0xc30 [ 2531.069992][T25461] ? _copy_from_iter+0x12b/0x1320 [ 2531.075047][T25461] genl_rcv+0x24/0x40 [ 2531.079049][T25461] netlink_unicast+0x533/0x7d0 [ 2531.083841][T25461] ? netlink_attachskb+0x880/0x880 [ 2531.088971][T25461] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2531.095233][T25461] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2531.101591][T25461] ? __phys_addr_symbol+0x2c/0x70 [ 2531.106636][T25461] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2531.112376][T25461] ? __check_object_size+0x16e/0x3f0 [ 2531.117685][T25461] netlink_sendmsg+0x86d/0xda0 [ 2531.122569][T25461] ? netlink_unicast+0x7d0/0x7d0 [ 2531.127537][T25461] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2531.133802][T25461] ? netlink_unicast+0x7d0/0x7d0 [ 2531.138770][T25461] sock_sendmsg+0xcf/0x120 [ 2531.143206][T25461] ____sys_sendmsg+0x6e8/0x810 [ 2531.147996][T25461] ? kernel_sendmsg+0x50/0x50 [ 2531.152695][T25461] ? do_recvmmsg+0x6d0/0x6d0 [ 2531.157311][T25461] ? perf_trace_lock+0xeb/0x4d0 [ 2531.162174][T25461] ? lock_chain_count+0x20/0x20 [ 2531.167051][T25461] ? check_path.constprop.0+0x50/0x50 [ 2531.172445][T25461] ___sys_sendmsg+0xf3/0x170 [ 2531.177058][T25461] ? sendmsg_copy_msghdr+0x160/0x160 [ 2531.182373][T25461] ? __fget_files+0x21b/0x3e0 [ 2531.187073][T25461] ? lock_downgrade+0x6e0/0x6e0 [ 2531.191960][T25461] ? __fget_files+0x23d/0x3e0 [ 2531.196670][T25461] ? __fget_light+0xea/0x280 [ 2531.201284][T25461] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2531.207550][T25461] __sys_sendmsg+0xe5/0x1b0 [ 2531.212067][T25461] ? __sys_sendmsg_sock+0x30/0x30 [ 2531.217132][T25461] ? syscall_enter_from_user_mode+0x21/0x70 [ 2531.223055][T25461] do_syscall_64+0x35/0xb0 [ 2531.227492][T25461] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2531.233494][T25461] RIP: 0033:0x7f0a45f05ae9 [ 2531.237925][T25461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2531.257544][T25461] RSP: 002b:00007f0a4347b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:22:42 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x5}, 0x0) 19:22:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf5b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xfc03) 19:22:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r3, 0xffff, 0x0, 0x0, {0x4a}}, 0x14}, 0x1, 0xffffff9e}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x10cc, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x25, 0xa8, @random="64e228eab66eb25bb5490aeaaa347a808a68698ff48017c6719494b862d6b4ab4e"}]}, 0x10cc}, 0x1, 0x0, 0x0, 0x24000004}, 0x240400d0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000340), &(0x7f00000003c0)=0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001840)=ANY=[@ANYBLOB="46a3bb177f38258d5742fb440080000000000000865901f77dd1eda552", @ANYRES16=r6, @ANYBLOB="010000000000000000000b00000008000300bd197fcc27f2a31f2b469bdd2323c45ddc9cc166e35cd4b07261ef16f1a4553b8df6cc92ed3a7f767bdd6c372a38afac3c0e", @ANYRES32=r8, @ANYBLOB="280050800800030005ac0f00050002000000000011000100d197cf1a5a1f4dd1a23cb07d62000000"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="ef37b7d0d123a38e266a394942f8a98000704899956ebc274bbe5e2655c2535aadde93e6fce6192816f039c81db501affd3fbea011a889f9beac186a13a5b7f1613a8e666ddcebda93e891d1b5e353c3976f285fd139f176a9fba73977dc2a45fa67d4d1667cd425f32ebc114da1b9bbda0e", @ANYRES16=0x0, @ANYBLOB="ffff00000000000000004a000000"], 0x14}, 0x1, 0xffffff9e}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0xfffc}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x404c040}, 0x804) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r6, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) [ 2531.266068][T25461] RAX: ffffffffffffffda RBX: 00007f0a46018f60 RCX: 00007f0a45f05ae9 [ 2531.274056][T25461] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2531.282042][T25461] RBP: 00007f0a4347b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2531.290022][T25461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2531.298003][T25461] R13: 00007f0a4654cb2f R14: 00007f0a4347b300 R15: 0000000000022000 [ 2531.306008][T25461] 19:22:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xfe02) 19:22:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf6b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xac, r1, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @local, 0xcf12}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0xac}, 0x1, 0x0, 0x0, 0xc872e75e1267b3b9}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000000) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x400000, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xac, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7534}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x85d0}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x18c, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x44}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_DATA={0x14b, 0xc5, "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"/327}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}]}, 0x18c}}, 0x40000) 19:22:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:42 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x7}, 0x0) 19:22:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x3e9, 0x10, 0x70bd25, 0x25dfdbff, {0x10, 0x1, 0x2, 0x0, 0x0, 0x2, 0xa857, 0x2d, 0x0, 0x7}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x48085}, 0xa001) [ 2531.599401][T25480] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2531.617171][T25480] device 1178 entered promiscuous mode [ 2531.637046][T25485] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2531.716954][T25485] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:22:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf7b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:43 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xfe03) 19:22:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="205dd014770575ad6e0d1afa887209d639affc3b5532999d8bd3c45529ce410e2431f4cd2108eb9ae83c370c0d1f05c9ded7c8361b5fd388813a512ef9c2cd29a55dc486f2db8d1e165386fe89d95fb4ce987de52a932cd13619b778d668aca55d3bde00"/112, @ANYRES16=r2, @ANYBLOB="010000000000000000000100000006000600000000000800070000000000140002007767310000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050001000000"], 0x64}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0xb9c, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0xb88, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x588, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x50c, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @remote, 0x3}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xdc3}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x41c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}}, @WGPEER_A_ALLOWEDIPS={0x3c4, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "92c39bd2f03777a2653011251644ec7103af367eb2f3e6937f7d4323b3cdb820"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xef}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @private1, 0x401}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4a694613883b38b254c4b76b0ed31b91e887d6d1aef6f4178875b935e3f61691"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x1, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7ff}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}]}]}, 0xb9c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7402}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:43 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x8}, 0x0) 19:22:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getrule={0x1c, 0x22, 0x300, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x10, 0x1, 0x7f, 0x0, 0x0, 0x0, 0x8}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x20000004) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf8b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="f3561d06", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x101, 0x482) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x15, 0x800, 0x70bd2b, 0x25dfdbfb, {0x23, 0x40}, [@INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "575eb0093265524837bf89c4e40718a7dc36a8f46521ae600ca1239d45667eefb9696294877c68bc20cf2f93c9e2ba8cf580f2db8a9f14d7149f1936d12caedbbbd81a236fa660ca96ade3e2aafdf4e5991a081ad3f98b7ecb4757"}]}, 0xfffd}, 0x1, 0x0, 0x0, 0x800}, 0xc4) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, 0x0, 0x0) preadv2(r3, &(0x7f00000009c0)=[{&(0x7f0000000640)=""/56, 0x38}, {&(0x7f0000000680)=""/160, 0xa0}, {&(0x7f0000000740)=""/136, 0x88}, {&(0x7f0000000800)=""/143, 0x8f}, {&(0x7f00000008c0)=""/237, 0xed}], 0x5, 0x8, 0x6e, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74020000", @ANYRES16=r4, @ANYBLOB="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"], 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:43 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x9}, 0x0) 19:22:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:43 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xfeff) 19:22:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400005b0400000000000000693386384e381c931e18399813015e8e2d2f8a25b8775cc0347ee374c3239431d4184c31ecb52a5cb9d08864c395db7951bc578f463b458046661a786569b6690557030873e328cf5a7adef9bd09dc91530845844b5de24d880ec88822ca9a91af45e21ce85110ce00a5116506d8693d128e07846295a6e71f358f1320854bc0618c696744e037e8ced866e3de9afe5d0027d053a970b26f941ee5bdab0b1503f2e4d1ac44ac6bd12b8a6f1f26c2b0b92b72f1313e0e6549fd75a56acbd02d6c6a22f4323c74a4beef7ac4bbb54c98fa5f4b62fa8425218d73922ddd30f648745d77d1bb27b61d9527a84ab3ddbcf489dfdefb5a77a738c3a977d3ffd6c2cfc4a3a11ff6e384157a3b9ba0a7410a267c72782c6055da8425570386e65333fa8d0ed3dafb13c76f434528316a035b170688b65495bbdeb10e488ecbd36032327720b82d5dc3d20b03d96fc775cd00ca7baea1eb9fc009ff763f2ad9010c112270cef1bcfeda070f063391904d7a13987f94ad26275c29142a6afa89d5e500e5ba83cef1c54eeae31bd9258603bc13615dab0e4a5414ff9167f65ad16ebb195bed2045ca66641c6b34ce", @ANYRES32=r0, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4851}, 0x4100) 19:22:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf9b50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) lseek(r0, 0x1000000000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000540), 0x200000000000000) r5 = memfd_secret(0x0) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, r1, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0xf}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "306387bf1138409628b4d2017c"}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x20008005) 19:22:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7c02}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:44 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0xa}, 0x0) 19:22:44 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x9, 0x0, 0x401, 0x10001, 0x4deb}, &(0x7f0000000200)=0x14) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @dev}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="d631636a", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0)="0ef7fe218e7d94a57d7a116e31f3f17e299a3420b1851e0ba6ba219c5de7dcd3fc6cc14e0d89bc818b5f85930cda923a224d21b288749bc16d4cdc9414fdca09a341aed02a4ba80ff5c106b5e4dd0b8b03dee3a4696d963907f118d8f6951d92b235e1b54b1256a67046f738679c079cc7f568715ae4a48ae969b1e12c3acb068fa013679b26805735b559f452fd3c5f4b", 0x91, 0x4000808, 0x0, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x10001, 0x6, '9P2000'}, 0x13) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={r4, 0x74, &(0x7f0000000140)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x9, @loopback, 0x7fff}, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, @in6={0xa, 0x4e23, 0x0, @empty}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000002c0)=0x10) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r5) 19:22:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xff7f) 19:22:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x222c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x101}, @NL80211_ATTR_IE={0x25, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x8, @broadcast, 0x7, "", 0x9, 0xea3, @device_b, 0x1}}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x8}, 0x1, 0x8, @device_a, 0x3, 0xfffffffd, 0x52}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0x20, 0x52, 0x37, 0x5}}]}, @NL80211_ATTR_IE={0x153, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @ibss={0x6, 0x2, 0x401}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0x99, 0x40}}, @mic={0x8c, 0x18, {0xa80, "9bc341d50cb1", @long="4a3f0a5fc281aac0ad690339d1cac44e"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @perr={0x84, 0xef, {0x0, 0xf, [@not_ext={{}, @broadcast, 0x7f, "", 0x38}, @not_ext={{}, @broadcast, 0xa000, "", 0x8}, @ext={{}, @device_a, 0x3, @broadcast, 0x28}, @ext={{}, @device_b, 0x1, @device_b, 0x10}, @ext={{}, @device_a, 0x1, @broadcast, 0x40}, @not_ext={{}, @broadcast, 0xff, "", 0x34}, @not_ext={{}, @device_a, 0x401, "", 0xd}, @ext={{}, @device_b, 0x6, @broadcast, 0x3}, @not_ext={{}, @device_a, 0x40000000, "", 0x40}, @not_ext={{}, @broadcast, 0x7b, "", 0x39}, @ext={{}, @device_a, 0x4, @broadcast, 0xa}, @not_ext={{}, @device_a, 0x3f, "", 0x29}, @ext={{}, @device_b, 0x2c, @broadcast, 0x24}, @ext={{}, @broadcast, 0x6, @device_b, 0x21}, @not_ext={{}, @device_a, 0x6, "", 0xd}]}}, @mic={0x8c, 0x18, {0xe34, "0d28d2bd286c", @long="fde1a0983d773a0457d5ec3dbb9f71b0"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mic={0x8c, 0x10, {0x2f1, "1f185c47e80b", @short="72381d7a4301f50d"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_IE={0x2064, 0x2a, [@peer_mgmt={0x75, 0x16, {0x1, 0x2, @void, @val=0x35, @val="4b317671ee5a5f3d04a2c64955085ad2"}}, @measure_req={0x26, 0x1003, {0x71, 0x5, 0x8, "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"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xff}}, @preq={0x82, 0x30, @not_ext={{0x1, 0x1}, 0x4, 0x1f, 0x15, @device_b, 0x4, "", 0x8, 0x2, 0x2, [{{0x1}, @device_a, 0x3ff}, {{0x1}, @broadcast, 0xfff}]}}, @measure_req={0x26, 0x1003, {0x4, 0x6, 0x20, "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"}}]}]}, 0x222c}, 0x1, 0x0, 0x0, 0x880}, 0x4048004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfa030000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8089}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:44 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0xd}, 0x0) 19:22:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fbdbdf250600000006000100051a004e2300000500130005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c815}, 0x8000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000003080)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003040)={&(0x7f0000002f40)={0xf4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "14bd42e568065bebcae05ff4a397d8e51c60208cef1a6dc3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "24bfb3e734294c7b0e246a3c55b029aa71fb8380fafb5eab"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "259789227b718565b3a4d5ffd06eb7c44a486a05a0b45e2b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "188cef04c6edcc217fda81af3e6c3e2443bf75f2f81a3cc5"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "357eb0ce959c4dafceaed5b47d7e16ca5e37410295a34f18"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0xf4}, 0x1, 0x0, 0x0, 0x40045}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000002e80)) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000030c0)={0x298c, r5, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x528, 0x5, 0x0, 0x1, [{0x3a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x180, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x101}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}]}]}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2bc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6e}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe9da}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff01}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4ec, 0x5, 0x0, 0x1, [{0x3e8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x234, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe7da}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x140, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x55}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x136}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x354}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}]}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xdc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6d34}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}, @NL80211_PMSR_ATTR_PEERS={0xd0, 0x5, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x57}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x237}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7865}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x86df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1b8, 0x5, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}]}, {0x104, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe973}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x148, 0x5, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x66c66508}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}, @NL80211_PMSR_ATTR_PEERS={0x62c, 0x5, 0x0, 0x1, [{0x628, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d0}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x60c3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x42bc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x130, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x280, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7cfd59adadd05b24}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x404}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x670, 0x5, 0x0, 0x1, [{0x458, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x250, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf801}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x30, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x360}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x176}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x316}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}]}, {0x1dc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x1b8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x138, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x37}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}, @NL80211_PMSR_ATTR_PEERS={0xef8, 0x5, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x298}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x0, 0x122, 0x2d6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1481}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x570, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x10c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x460, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x651d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x60}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf0}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x177}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x24}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}]}]}, {0x3a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x80, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x28bd8d9dedbc93c9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x93}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb2b5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x1d4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x150, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xce}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}]}]}, {0x448, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x3e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe9a}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x96}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x31}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2a}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}]}, 0x298c}, 0x1, 0x0, 0x0, 0x800}, 0xc800) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x48, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20004800) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0x55, "171366a75cba7ce9a9e9c40cb154ad86103b6266d038efcc0873a48ee4267141bc702b5dc28b250153a4be3260883450582f325df06522c9fa8959d14f833eebf87205fda7d56e41816ef88d51f47eae624d8ef91d"}, &(0x7f0000000440)=0x5d) 19:22:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0xfffe) 19:22:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf9, 0xa4c2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd2b, 0x7, {}, ["", ""]}, 0x1c}}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x347, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfab50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2533.522705][T25614] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2533.541082][T25614] device 1179 entered promiscuous mode 19:22:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400481, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xc8, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x13, 0x4, "0d397a0c530f94ad889f38c2f04f70"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6c5654db50ecc89cad6e4362ee"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "0bb2f67c9828ef562bf7c6"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x38e, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 19:22:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x3d6, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:45 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0xe}, 0x0) 19:22:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x20000) 19:22:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000406"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x3fa, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="98fc5f158d1227d42a23205b4e3cebcbc1271e1d3c28", @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x4020000) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfbb50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2534.105895][T25660] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2534.124156][T25660] device 1180 entered promiscuous mode 19:22:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:45 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0xf}, 0x0) 19:22:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d197cf1a5a1f4dd1a23cb07d62"}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x68, r2, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r6 = socket$netlink(0x10, 0x3, 0xa) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x40480d1) 19:22:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9c01}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x44001}, 0x40) 19:22:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfcb50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298d4) 19:22:45 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x10}, 0x0) 19:22:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2534.768669][T25704] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2534.786913][T25704] device 1181 entered promiscuous mode 19:22:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r1, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c75}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcb}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xae01}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfcffffff}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x4703, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298d5) 19:22:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="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"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x5da4, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:46 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x25}, 0x0) 19:22:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc405}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x8e03, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfdb50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xa45d, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x12100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000b40)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0xdc, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb45}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8040}, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000062c6e33acde841e7447a41371ed4c7892bc61ac8390fb07dff08cd73415255f368dd5d3321ec79dadca51693a85898d2704158fea6709524a5a6b60fccb015444013a45029ca71195bb0988ddddfafd58c44e1d83649570ce844c5cbb12760e697186aafc008ea467d48b0c6b44cb50135d000f87ef60174c3", @ANYRES16=r5, @ANYBLOB="000125bd7000fbdbdf251200000008003200000000000a00090036b159f99fb800000500300001000000"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x10) 19:22:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xd603, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="00009600", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298d6) 19:22:46 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x39}, 0x0) 19:22:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xca03}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1, @ANYBLOB="0000000000000100000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe030000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xfa03, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="000066af3157accb782fc47b40450000c0f8158cae2833293670", @ANYRES16=0x0, @ANYBLOB="200029bd7000fcdbdf25000000000800090001000000080002000000000008000500ac14142e08000500ac1414bb0c000300030000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000500ffffffff08000800040000000c0003000300000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x240400e1}, 0x1) 19:22:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x60, 0x0, 0x408, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004010}, 0x41) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x20044000) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='\x00', r3) 19:22:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2535.909075][T25791] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2535.927051][T25791] device 1182 entered promiscuous mode 19:22:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="010000025358a27cc881815af6c922dac29c5f3bd943b5d1dcd833ea745bd3405aafad5e935eda94d19847bc0e8b61d360f4a26e75410f861e8de76bc537585f22a26fd156d1a9bb230c3becaafd71959d7dbe2ef5a6890aef467002ea0e83000000000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:47 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298d7) 19:22:47 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x5a}, 0x0) 19:22:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe002}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x20000800) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_dellink={0x28, 0x11, 0x800, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x800, 0x8000}, [@IFLA_CARRIER={0x5, 0x21, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24000045) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeb50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x125100, 0x0) recvmsg$unix(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f00000004c0)=""/255, 0xff}], 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x118}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r3) 19:22:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x9, 0x0, 0x401, 0x10001, 0x4deb}, &(0x7f0000000200)=0x14) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @dev}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="001b0000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6}, @val={0x8}, @val={0xc, 0x99, {0x8, 0xa}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffffc}, @NL80211_ATTR_VENDOR_DATA={0x18, 0xc5, "abdd3e6ad7a943d6e534aaa9fea2f4751a48d99d"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_DATA={0x94, 0xc5, "c33b766497baee7df47d781c377546baf0a77a8342bcece2d70d4f4ecc4f9f98234d200e638fede799fc7787917496ca7e2a4f4cc301c46f1b8dadce2d56c325eaa8f68fd002f3bbb5a4312534b718e1663c566308cdcf80b5e13ea6795459163997892e7ba3af902766e5addf14ca76361fa721b97da1375ec58bf3a3917599e9565952fdb1818ec26cb48ff181b1a9"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7ff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40004}, 0x2) 19:22:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xea03}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:47 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298d8) 19:22:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfedbc8ef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x448, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x338, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "1229f19177edbf3af0cb8c8c920b216e545a0bf10d89ebd759"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "a884363200b5421bb0d987b47de67901d167b4bf4d2afa4c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff60ed}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ID={0xe7, 0x3, "695e853622c72f7601e0f18da8cc9c2c98f7049138f7c1afd4dbd7e6ef2570fe9622f310ca577ddb793b6910d770df2344a2e037d91065a367849343e0435e85abd1a5341c034b1e289201881cdd1f1c7f8d572e69b576e13ba1c3cdc6b1c10fb074ebfb9b25e744382e5eda001e536846a3c74902cdb57cc45527f1cc8a8e1eea96418c5107bd1b551be822f81fc9a650ff479ff22872a7fb4dae59e6bee823446238a5deb88886581d8afdf5f6bce30c3d4f133a483685f7b369ec430b9419d2e3facf23a0fb0534c990d44f3103f1bf7de9a245260b526c75c0224f9ce2ef3c28bb"}, @TIPC_NLA_NODE_ID={0xeb, 0x3, "94de2a5b11b1caf42d534a6bbe3fc45e767bb8b5e314121cbdabb278a5f78393541810bb701cbc7e1ad9f90570d8a2f123f30391f59622585ad006cb100703e78a99e2ecf490c3b318a3c2ce44436fc682c9f37aa1a6d2ef2d38566e0b7b5a6fc53de22e216ae5ce2236a95829a330c446830e89fd3e1ad8a2d5ded87572dbe438c08d3986851fcd51ae69f2c221e9b750251a3216b19bc30463b2659ef1bb2dc6ba3b08766339f321011f84a23fedf1392d7f984293945da9f4e53a0f2106c603cb496a2ad91efe1afbb963dd46aa72122add3404dd4ff97bebae382c4fe03921b83c97860050"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xbf, 0x3, "73b53e55907ba0c10557f4a7fddd526f7dfd4263f9fdaba0bb6c3b7923629e579b072a3b407d3bfd362d849967464442761f338a1205bd69b2806e6aad7c55daf0ade76032827e3ba3d957333ea3dd19aa1408d25ca26e7fcf542ee1d78388a811cb8a6fdf02d0531ac2bc5241ed6fbd2e2e24401921d7d20c3aa535bf0c5c9c04d4435359597087a0a410b6d32bda252ad712dc330ed5992446b6bc1eb0b2aa851b42c06179c06f9d9b242061fd8b1139f63ea43c3cc3ca415840"}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfbd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x4048000}, 0x8001) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:47 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x63}, 0x0) 19:22:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x5000000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x6000000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_getanyicast={0x14, 0x3e, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x80) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x5c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x204, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xc4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x154}, 0x28014) 19:22:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x8000000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2536.936577][T25866] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2536.956026][T25866] device 1183 entered promiscuous mode 19:22:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x8811}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d197cf1a5a1f4dd1a23cb07d62"}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x9}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4811) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x9000000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298d9) 19:22:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff0000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:48 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x500}, 0x0) 19:22:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d4020000", @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf253a00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900020000005d0000002a005b00c5885e8976a5f24aff2c3acc3e05dab5ce494193338792f3ba4d53bea1ae14b43dc80adb033e0000e5005b004d92967a03ad2062f419c6d62ac1aef632d82e72c401e75fda3d0d5c93f42ae545e3db160bab3094bceea4db751666f33ebca303338d077a52a0a68b1acf010e1ad5bdb2f946332136c99a4fa1e6367ba5c633c636f9a42864d9ed9d876458a83fb00080ded0c9b25b8ff8682119009140d873341e60f39fbce3cee0f52421be5cc4a0be21f4dbac050459992c29f0ffee749f350ddd4381b84107072672d827ff2a60f63bbf2b89679afec56f3db4c641fd755070a57a22a8bb75b2571ad491dd047d720059fe7a5d70fd2970d670b80004e72564120fcd016b5aed2bcc29a7c100000006006500ff0f000071005b003a5d28715caf27974686686c4f622e90971915eb7334f58e2647b64239325f6e82b95cc73460c251ab8757ef6c909f9c652167f34a50cd097f70cd2adc941ea4a7a74f6b23926b96e3bbe7fac6ae221e6cc890e16172d9dcba51fb0322434e68d14357d924f8adeea8b3a0dfff000000060065003f000000ae005b00f940155a8f2087686d45964f319d65abb8a59dd5739ba46c55d2cec2838828c4df460f0aab6b9393804951abfaecb8315c4b8b8e3c28e4559d85123db95014d5249f83b4912de7bc22efe282a1f3fe65a3a05c50121584bbb3a0f3f437822332aa57a0fb315340bcfe43b97a9eab86e9da54e28b3defdef822e993627e06b1ce55a9f3ac5bdc1d0f5fd1b7b0d7dd14f1d65ba1ac68e1137e892217b4973172a6b8369a1974f383d6ccdb00005c005b0001abae1711578b5faef6b7693e52701c2359419b8ce7f052d4c772fcca6ffa65a9d2247e5d7699acb7c5f328d675344e8550d032210658ec3c76183cbbade6300390e0ff4b4705fa86ecc6b47ede628df6c0f3ea6dae19a006006500ffff0000"], 0x2d4}, 0x1, 0x0, 0x0, 0x20040094}, 0x400c880) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3f) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f00000004c0)={'erspan0\x00', r6, 0x20, 0x10, 0x0, 0x9, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x67, 0x0, 0x6, 0x2f, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x44, 0xf, 0x3, 0x5, [{@multicast1, 0x1000}, {@empty, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0xfffffffc}, {@remote, 0xfffffffe}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0xb1}, {@empty, 0x6}]}, @cipso={0x86, 0x23, 0x1, [{0x7, 0xe, "a7e55bd3a684c012120fbe77"}, {0x0, 0xf, "720e20e633b9c656f8d8d66748"}]}, @timestamp_prespec={0x44, 0xc, 0x8f, 0x3, 0xb, [{@local, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x93, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x10001}, {@empty, 0x56d8}, {@loopback, 0x2}, {@local, 0xffff0001}]}, @timestamp_addr={0x44, 0x4, 0x2c, 0x1, 0xa}]}}}}}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r7, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="24437c84af61"}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4002004}, 0x20040000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7f}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x46}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x2000c0d5) 19:22:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfa03}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x3f000000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20040014) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x47030000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000b40)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r4, 0x8, 0x10001, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd8fd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000085}, 0x8080) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x8e030000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff040000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298da) 19:22:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000400)={0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x653408}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x80000001, 0x8, 0x1f, 0x3}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20010}, 0x4004) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="000000009731990a3b33ed1a0f605e4298876734f3fd54ebf1721ea22034d483da685f5819c8b483c96cc17b377e8f7263b9200000000000000082d38c37da90766386f860b8d6074b095287b12ffe244f5950d5674b55b43858a92d759aea6fca67d7a1fafea364ae3696f18c8b5d2a9aa9d83bef150011503326aa361357fe8bc48c400a2ebf4c9d46b2b78e569e2027ce6366e5ef369cfb", @ANYRES16=r2, @ANYBLOB="00032dbd7000fddbdf25050000001400080076657468305f746f5f68737200000000050005000000000006000200000000000500070003000000050014000100000006000200f4fe00000c001600d4ffffffffffffff"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x8040805) 19:22:48 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x600}, 0x0) 19:22:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfc03}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xa45d0000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b0700da6809e7d2a6cb62"], 0x14}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3f) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4855) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f00000004c0)={'erspan0\x00', r4, 0x20, 0x10, 0x0, 0x9, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x67, 0x0, 0x6, 0x2f, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x44, 0xf, 0x3, 0x5, [{@multicast1, 0x1000}, {@empty, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0xfffffffc}, {@remote, 0xfffffffe}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0xb1}, {@empty, 0x6}]}, @cipso={0x86, 0x23, 0x1, [{0x7, 0xe, "a7e55bd3a684c012120fbe77"}, {0x0, 0xf, "720e20e633b9c656f8d8d66748"}]}, @timestamp_prespec={0x44, 0xc, 0x8f, 0x3, 0xb, [{@local, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x93, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x10001}, {@empty, 0x56d8}, {@loopback, 0x2}, {@local, 0xffff0001}]}, @timestamp_addr={0x44, 0x4, 0x2c, 0x1, 0xa}]}}}}}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r6, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="24437c84af61"}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4002004}, 0x20040000) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10800201}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x7c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) [ 2537.896537][T25934] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2537.914903][T25934] device 1184 entered promiscuous mode 19:22:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xd6030000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x24000000) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40001) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f0000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xf5ffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xfa030000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:49 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x700}, 0x0) 19:22:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298db) 19:22:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x74, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1dd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x371b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x64}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x36}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001a00)={0x70, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x36}}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1f, 0x53}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x5a}}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xd5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2400000}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xd9}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x10000840) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f00000019c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x40080) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d197cf1a5a1f4dd1a23cb07d62"}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10044000) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) sendmsg$nl_generic(r2, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f0000000100)={0x13e8, 0x12, 0x20, 0x70bd28, 0x25dfdbfc, {0x1b}, [@typed={0x8, 0x23, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @nested={0x1330, 0x41, 0x0, 0x1, [@generic="0b8dc0e926b3c84e88a424c6f0bc76143a72c9a03f95927976587e7eb9650769dfea9e7c221d9aac749e52b3e08060f72ece8d87c30e484ee904b45cd80d80772ca87dc05d9f71119f7204cb1aeea5eb48b6e09f3ea9fd5c4039e09782e68c247e24bb7d6b527d279f0fb4889457dbae23560b376ab6f2df5416f6c36d473c118d2588b3d4e90899e60d2d7d4eac3e9337e58d8aaaaa3a0f885fe9f73741c193e84cd4d1b9a0777e121a4112a74369f695ca2af39df534c8483461a5c345ca235353c8c0", @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x7}, @typed={0x1004, 0x91, 0x0, 0x0, @binary="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"}, @generic="12a8", @typed={0x97, 0x7, 0x0, 0x0, @binary="885fef86d2de783ed53444c57e7290c3902dc58ae00ab64254db2d0858611a512550fdaae85ff2541c45ee529cc174576ecab8ad97d186dd6fba2a357273f1679fbcd6ac7f59390f201a440cbccf5c70a2f3e384a51e6857e825764880c32533681ab42952339833f9fc22fa5387673124a4a33a5827dae9669ddc235ebaf568aecc7fd9f1f086055f4ed203ba87bd376cd51a"}, @generic="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", @generic="3f19a07d7332f77805abe2ea7d419128809746df1299eac600fe7747a1cec80a7f0a012bfaa122f828f5fdb8876be0d81f2f3fe1f61224a8f1fe454fb9c5b3a136ff3e66c97cc6c2293c78f16b00f1af937f3dd912f725903d680b188d99217a5b0d705e8af5cefe671846adc7e7449781cad1ff221773af677d3c4232bef5f343bbdac3efad2cf694904d1ccfec40db5aa2b0c42bf2737d25e3d463f77e9732d743e74950d544c18b25e9f9e076393e8d3d2521c7668b23b9c231713d5e489a4b"]}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}}, @typed={0xf, 0x88, 0x0, 0x0, @str='SMC_PNETID\x00'}, @typed={0x6e, 0x3d, 0x0, 0x0, @binary="9cdd8c36e6ec788f657129e510045fa8d4a7c901fc00a823f870e490054bd570dae4d5eb5c8a500153d429b79fc8180a054501057a2951abdfd4c8c42d7a5e89922bc5c69c634d259271d17db5428ef9d65fc1f128caf035d5bf25027339b9c52401e99bdcbb0400bab2"}]}, 0x13e8}, 0x1, 0x0, 0x0, 0x801}, 0x2) 19:22:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xfcffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f0000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xfffff000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff04}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={0x0, 0x1d, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x40000) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:50 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x900}, 0x0) 19:22:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298dc) 19:22:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xfffffff5, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000002c0)="0400", 0x2, r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000002c0)='G', 0x1, 0xfffffffffffffff8) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r6}, &(0x7f00000000c0)=""/83, 0x53, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRES32=r5, @ANYRESHEX=r0], 0x14}, 0x1, 0x0, 0x0, 0x2004c085}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffb50900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xfffffffc, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2539.083443][T26029] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2539.101739][T26029] device 1185 entered promiscuous mode 19:22:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1e0, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1cc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x98, 0x3, "9443dc10b19c1a4efc804886d503c1e87154d9fb1b52c4e7ea3c62defdc67a06d02e9a64b8eb5ca6ecd80d531ec43e73a2a1042ff100de408cfabc197a3f059b3b6e6c300e394e92ce33e0aa52790b7cac2b0c057e8f73437e6b3e58916583d07f83f9e6c165b2efa8a917535ec6058630cf46fc0289506289daab522c01abd1d53fa4c45e3ea8035b10b2b1d9d36f0f3ae81dcc"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ID={0x5c, 0x3, "719ef25385d1e58c88c232ae4a9b2d813e72ae5769357987a9f0543842c9ffb062196bd632336f17cf69bc42aab61438cbce757442d9d79b28fbd32ee73f9c601ddc0b77005bcaf1e28840057ad560a369efcd70c9a04440"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xb5, 0x3, "3c7ffafc9dbaace802de1a78cc17ee1b799f159cc75678818bce1e1fd905f22b604ee8ae1acd2c0c0dcffcd02ca58b48840b6cdbe093ef5e2bc95229f0f7567f1b117b8ba391ec479b39230aa82423fbfa48a3191bb2fdc2a9d59df1ba38328b4527ba3e175d117517c80a8db2f1568437895fb10d85c9ef55d5ff63ba6255a6864f8e081769370cdd749c09b2dda469e611b171316ab80c8f9ea1be231085e6dc8cef4e9d492438d58baa0c2d2dbf1cf2"}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000000}, 0xd0) 19:22:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000040)) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x6, 0x1, 0x200, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x7, 0x700, 0x0, 0x81}}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_dellink={0x34, 0x11, 0x400, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x802, 0x13}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x2}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}]}, 0x34}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r3) 19:22:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0xf, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:50 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0xa00}, 0x0) 19:22:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298dd) 19:22:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x8a000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0xc0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff0300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0xec0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRESOCT, @ANYBLOB="0004e5ffffffffffffff00ba84b092416eb40d5bc659e25758f6c359eb519849f6b419c3e4acb3070d6409c85a3bdfe39eef0ea3ec2fcc7d212292c3f4c0146bf51b9cfa7f8fb46e9f61f72c133eaed253ff2ce007000c78c3554b1fd4ef7b110803f71329fdc6e336d73915022768fafa8ec923fe11a911b18ec4ce8631edab46911403c6422418915b6b647df61dbded22d9350888bf727136d8d3e2ab494d3d9e7c8ce05ee210508d1e89d0f3d7c36efd012196e43e6a06481d1a7b256b01350f460ee1febe26ece577d9906745821088c2eaef1477de74b82b08bf"], 0x14}, 0x1, 0x0, 0x0, 0x4048010}, 0x40800) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x33fe0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x150, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff42}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7ce}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa685}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x2004c041}, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:51 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0xb00}, 0x0) 19:22:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x200000d4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) 19:22:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff0700}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298de) 19:22:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000700)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c0000000c00058008000100756470009635b7eebe06b76bee1fd713067d402b352cbec01756db2bbc844ced378cca8db94baab23cfecb20ad42faa96ecbe379e711ea1480dc3865b4b3246f4b933f75bb415065e0fa97a6f111fcb6a4f66997d517364262e414641568ac1d19ac1555b819c5914cb7c0d7de2c2d18b9c7678f9ef9b20b7892f8bbda62341c156c6613226315de839d5be0d9277d866a4af2ee2d783a38e6a92e5f2df94699691ed63e4e2b16b6c69c441643853485048472597472093e8abb9c2265f1fda7dbd820ccdaacc7"], 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x308, r5, 0x400, 0x70bd26, 0x6, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe35}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24f607f4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff70}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x33}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x83ba}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6c}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6431}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc49}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x88f}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2bb80012}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xaf}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x417}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0xffffffffffffff23}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffd}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x40051}, 0x8c0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0x89, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x7ffff000, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0xfffffdef, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) [ 2540.204522][T26109] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2540.222591][T26109] device 1186 entered promiscuous mode 19:22:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:51 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0xc00}, 0x0) 19:22:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2540.370090][T26127] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2540.418514][T26140] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:22:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffa888}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x304, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5a0}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "96a6bbfdf8b4c1675ec9b48e984445cf58e50fb7"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe4d6}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe0, 0x3, "015f0cf35051a7562d38c7b8677fb4c22fc2e30741f04f4391b6f14b91c1a0ff25ee57fca41ab816ec95895c6f0326b8aeb7518ffba549c2628821a2f73c785f0b82dbaf2b01273a4d5629c548dd0cb7376c5c31d702cdc96bbd2ec247cba470abbade0582b40fc13e341f4df9c070a2f4adf99cc1eaacf1d534c0a46210e65e0fc6b218f08d668e95f6604ee9023faca35e3df834c258246fe6e1bd226457bd872281d2351fba5902ae21543d75d64629cd5e9bd370467913afce428063279c102dd9e4cfddb1bfd0246f8a9a8ed78475c83110a3fea6b3c11b0d38"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b15eeda118754c8f33a93479fde196cdfc6500de2968"}}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298df) 19:22:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r4) 19:22:51 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0xd00}, 0x0) 19:22:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x7, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r3 = syz_io_uring_complete(0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xc4, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000041}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000240)={0x20000, 0x1, 0x5, r5, 0x0, &(0x7f0000000200)={0x990af8, 0x4, '\x00', @string=&(0x7f00000001c0)=0xab}}) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="01000000449bc70f662f6ed54647c31892f49af0943d9b4d8346f47697e965c1d58d7e09d2dfd14149f73185dad04d5ac957abb4384f9d4e8e846036e1d9937d43192c13b90f3d1d6e7117b2b309c9c62ce0aaad8cd59f3c87e368e40475a30a1a69d2915867af6d84c6f9fdf54b68f97406056ce4a8852a5c9a5a4548941a69d81d04f5a11f9023979a085bedb445110589bfd410593d7b5ac2dedfaab266724ccadc76a206edb56eb8249bdc4328e5e5ae518d217546775469c3c48fbcddbee9bee3f47c018a38415fe81e73dfa1ddf9c432bd21", @ANYRES16=r4, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x8, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:52 executing program 1: write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0xd9, 0x75, 0x2, {0xce, "88b87f5a47c2e1f529be41400a6f76ce2f396a765c8c8c2c4057086f9cabad07c40545c929a5f3f17d5c63709cf36717228c062869bf844870524cb2dada044ee666939dc743177ac3dd8a563b1c837ba41dc6fd1dc589444e236b278143c2d36b78443f635ae77961174bd11492752f1f8b6bb49a882740e31726f39e83e44becc10190f7a02dc870696aac72bff468c0074af7387e7227a97505db0c52612a8370de41bfc9855e76dcf22f58d87f73229dd3b8d8cc0721291639452828988ac14b4f6c60566ac77d0e9d39b58d"}}, 0xd9) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000000", @ANYBLOB="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", @ANYBLOB="0b070000140000080000064d843682d81a97b5c5ddd08af84f7c2a12c8396e22ae0bc954ba594d47f51ee1ef5fdc90dbff53914e5d21315fed08e5c43b75753c4c469d5c148ddc8289f552a554b3524a5210f1c4800ce017628fa3255017183a19e06807eff3f8f736d5ba7bafceedd138255279d53ae24c85589f8c9f471e63a65a32d5f3a8d8a07a58e5cecdf96bdf978922d0a77cef858e4443beddee6730b34e923bc9b639a67f32091513547b5eeefe92d2c4c0"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xdaf}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xed5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4004080) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r2) 19:22:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0xa, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffff}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298e0) 19:22:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000440)='.pending_reads\x00', 0xc0400, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40040c0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r4, 0x400, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x4000010) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x14, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:52 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0xe00}, 0x0) 19:22:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="10200000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xb4, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa65}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x448}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008040}, 0x40004) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r0) 19:22:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x18, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="40f31f9f091b06964f7e8c"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x66, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2541.316853][T26202] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2541.335055][T26202] device 1187 entered promiscuous mode 19:22:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, &(0x7f00000000c0)=""/83, 0x53, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006", @ANYRES64=r2, @ANYRES32=r2], 0x14}}, 0x20008040) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x300, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298e1) 19:22:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="adfb7a3045dc085b7dd2f5f123bbcc", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x500, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:52 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0xf00}, 0x0) 19:22:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff9e}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84dc}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x600, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:53 executing program 1: splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, &(0x7f0000000140)=0x3f, 0x3, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="123036fa54658de3d83e4270473f7f72090000007a6e6f515c1691be198ac12293b803008d9410cc30e107c929fa986f26441745d4e91a4cdf0dbb8600000000000000", @ANYRES16=r2, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$sock(r3, &(0x7f0000000000), 0x0, 0x4040080) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x700, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x900, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) 19:22:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298e2) 19:22:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffc3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:53 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1100}, 0x0) 19:22:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0xa00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x43}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84dd}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0xb00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0xcc80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x1d, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x4, 0x80000000, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0xc00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2542.385849][T26285] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2542.404504][T26285] device 1188 entered promiscuous mode 19:22:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x234, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbd, 0x3, "21317d53b9f9e8c91b8fb8a1ec65ef446bac08ed02180608d6d42657cd3a12258c3d81e95eee67a71515555725c2e37193ef0171513c43679a90e5e5aacddc3878321d4110fae1c65afcc5869c32cdb923f7cd109d3e069a81c764efe4314639635a1e47855a5abe3eaca194cf99283d5559f9172130d882c0d67444fcd01d11592ee7a412f291a2a8de3f140a5f4a03bd77e83e2c0abc58fe016711d037f80363fccae0dc29842f7804d0609a64185c7c680341ee9c203397"}, @TIPC_NLA_NODE_ID={0x48, 0x3, "122493fa39ece511e8394d5f5ec38d9e52ca1251dc3e8d9082d06809ced58936d4d31eeb7facffc3005ea6f935eb049d2b47759b7336cf863872a7ba385288eb95c6d77f"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe3, 0x3, "a6ca4b33cb821aac1465d3373074ecb22a7fd85fd7478b4b2c60ba6cce9c5d15f6856bae333bf8862e3732add88a24f612f6e93c4487d09f96f4efc6ead6ebac31d7c51fe10a37e6efee70970e92ef3c4f9bcbb18a614e423848a34668ff19abf07cc202ec958427ab33ece7ede04d1e0a1d7822ca94c7179317037ae0ae6f7242d152120faef443f0e9f9d0a931adab4b5ab629992e5a3f6eab4762c828b0b09aeab1018e73dea83439884a0b33ca32c9076f36db4fe2f8b4a12a78ffe25c1e8dc36f6dfb81293698d48f4774e67a6779b6922611db590e25233445f85a2c"}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe0}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0xd00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffe4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0x17, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x800, 0x400, 0x1, 0x5b}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000045}, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xb4, 0x0, 0x9, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFCTH_TUPLE={0x90, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:53 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1200}, 0x0) 19:22:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298e3) 19:22:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84de}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0xe00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0xf00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="a4506389", @ANYRES16=r1, @ANYBLOB="0b07000010000008000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1100, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140780", @ANYRES32=r1, @ANYBLOB='\x00'/11], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 19:22:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84df}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:54 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1300}, 0x0) 19:22:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1200, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298e4) 19:22:54 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0xa00}, 0x0) 19:22:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1300, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1400, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2543.334584][T26354] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2543.352802][T26354] device 1189 entered promiscuous mode 19:22:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84e0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1500, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:54 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1400}, 0x0) 19:22:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1600, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298e5) 19:22:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1700, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84e1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 1) 19:22:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1800, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2543.931717][T26397] FAULT_INJECTION: forcing a failure. [ 2543.931717][T26397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2543.944881][T26397] CPU: 0 PID: 26397 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2543.953321][T26397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2543.963387][T26397] Call Trace: [ 2543.966672][T26397] [ 2543.969611][T26397] dump_stack_lvl+0xcd/0x134 [ 2543.974226][T26397] should_fail.cold+0x5/0xa [ 2543.978758][T26397] _copy_from_user+0x2c/0x180 [ 2543.983468][T26397] __copy_msghdr_from_user+0x91/0x4b0 [ 2543.988872][T26397] ? __ia32_sys_shutdown+0x70/0x70 [ 2543.994009][T26397] ? perf_trace_lock+0xeb/0x4d0 [ 2543.998886][T26397] ? mark_lock+0xef/0x17b0 [ 2544.003342][T26397] sendmsg_copy_msghdr+0xa1/0x160 [ 2544.008390][T26397] ? do_recvmmsg+0x6d0/0x6d0 [ 2544.013003][T26397] ? perf_trace_lock+0xeb/0x4d0 [ 2544.017873][T26397] ? lock_chain_count+0x20/0x20 [ 2544.022752][T26397] ? check_path.constprop.0+0x50/0x50 [ 2544.028131][T26397] ___sys_sendmsg+0xc6/0x170 [ 2544.032724][T26397] ? sendmsg_copy_msghdr+0x160/0x160 [ 2544.038008][T26397] ? __fget_files+0x21b/0x3e0 [ 2544.042687][T26397] ? lock_downgrade+0x6e0/0x6e0 [ 2544.047548][T26397] ? __fget_files+0x23d/0x3e0 [ 2544.052231][T26397] ? __fget_light+0xea/0x280 [ 2544.056820][T26397] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2544.063065][T26397] __sys_sendmsg+0xe5/0x1b0 [ 2544.067566][T26397] ? __sys_sendmsg_sock+0x30/0x30 [ 2544.072596][T26397] ? syscall_enter_from_user_mode+0x21/0x70 [ 2544.078491][T26397] do_syscall_64+0x35/0xb0 [ 2544.082910][T26397] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2544.088802][T26397] RIP: 0033:0x7f2d0d66eae9 [ 2544.093209][T26397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2544.112812][T26397] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2544.121222][T26397] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 19:22:55 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1500}, 0x0) 19:22:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1900, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2544.129186][T26397] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2544.137146][T26397] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2544.145108][T26397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2544.153067][T26397] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2544.161046][T26397] 19:22:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 2) 19:22:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2544.323014][T26407] FAULT_INJECTION: forcing a failure. [ 2544.323014][T26407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2544.336197][T26407] CPU: 0 PID: 26407 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2544.344629][T26407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2544.354699][T26407] Call Trace: [ 2544.357990][T26407] [ 2544.360933][T26407] dump_stack_lvl+0xcd/0x134 [ 2544.365551][T26407] should_fail.cold+0x5/0xa [ 2544.370091][T26407] _copy_from_user+0x2c/0x180 [ 2544.374792][T26407] iovec_from_user+0x242/0x3c0 [ 2544.379592][T26407] __import_iovec+0x65/0x5c0 [ 2544.384219][T26407] import_iovec+0x10c/0x150 [ 2544.388759][T26407] sendmsg_copy_msghdr+0x12d/0x160 [ 2544.393890][T26407] ? do_recvmmsg+0x6d0/0x6d0 [ 2544.398509][T26407] ? perf_trace_lock+0xeb/0x4d0 [ 2544.403378][T26407] ? lock_chain_count+0x20/0x20 [ 2544.408253][T26407] ? check_path.constprop.0+0x50/0x50 [ 2544.413650][T26407] ___sys_sendmsg+0xc6/0x170 [ 2544.418262][T26407] ? sendmsg_copy_msghdr+0x160/0x160 [ 2544.423569][T26407] ? __fget_files+0x21b/0x3e0 [ 2544.428270][T26407] ? lock_downgrade+0x6e0/0x6e0 [ 2544.433160][T26407] ? __fget_files+0x23d/0x3e0 [ 2544.437870][T26407] ? __fget_light+0xea/0x280 [ 2544.442487][T26407] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2544.448758][T26407] __sys_sendmsg+0xe5/0x1b0 [ 2544.453282][T26407] ? __sys_sendmsg_sock+0x30/0x30 [ 2544.458341][T26407] ? syscall_enter_from_user_mode+0x21/0x70 [ 2544.464267][T26407] do_syscall_64+0x35/0xb0 [ 2544.468702][T26407] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2544.474616][T26407] RIP: 0033:0x7f2d0d66eae9 [ 2544.479035][T26407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2544.498664][T26407] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2544.507101][T26407] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2544.515093][T26407] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 19:22:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298e6) 19:22:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84e2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:55 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1600}, 0x0) 19:22:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1a00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2544.523076][T26407] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2544.531061][T26407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2544.539050][T26407] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2544.547051][T26407] 19:22:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 3) 19:22:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1b00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2544.687596][T26422] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2544.687982][T26423] FAULT_INJECTION: forcing a failure. [ 2544.687982][T26423] name failslab, interval 1, probability 0, space 0, times 0 [ 2544.705459][T26422] device 1190 entered promiscuous mode [ 2544.708448][T26423] CPU: 0 PID: 26423 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2544.722344][T26423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2544.732415][T26423] Call Trace: [ 2544.735703][T26423] [ 2544.738647][T26423] dump_stack_lvl+0xcd/0x134 [ 2544.743265][T26423] should_fail.cold+0x5/0xa [ 2544.747799][T26423] should_failslab+0x5/0x10 [ 2544.752326][T26423] kmem_cache_alloc_node+0x65/0x3d0 [ 2544.757547][T26423] ? __alloc_skb+0x214/0x360 [ 2544.762157][T26423] __alloc_skb+0x214/0x360 [ 2544.766608][T26423] netlink_sendmsg+0x967/0xda0 [ 2544.771400][T26423] ? netlink_unicast+0x7d0/0x7d0 [ 2544.776366][T26423] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2544.782635][T26423] ? netlink_unicast+0x7d0/0x7d0 [ 2544.787591][T26423] sock_sendmsg+0xcf/0x120 [ 2544.792025][T26423] ____sys_sendmsg+0x6e8/0x810 [ 2544.796810][T26423] ? kernel_sendmsg+0x50/0x50 [ 2544.801600][T26423] ? do_recvmmsg+0x6d0/0x6d0 [ 2544.806223][T26423] ? perf_trace_lock+0xeb/0x4d0 [ 2544.811099][T26423] ? lock_chain_count+0x20/0x20 [ 2544.815973][T26423] ? check_path.constprop.0+0x50/0x50 [ 2544.821369][T26423] ___sys_sendmsg+0xf3/0x170 [ 2544.825981][T26423] ? sendmsg_copy_msghdr+0x160/0x160 [ 2544.831293][T26423] ? __fget_files+0x21b/0x3e0 [ 2544.835994][T26423] ? lock_downgrade+0x6e0/0x6e0 [ 2544.840879][T26423] ? __fget_files+0x23d/0x3e0 [ 2544.845588][T26423] ? __fget_light+0xea/0x280 [ 2544.850205][T26423] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2544.856503][T26423] __sys_sendmsg+0xe5/0x1b0 [ 2544.861028][T26423] ? __sys_sendmsg_sock+0x30/0x30 [ 2544.866089][T26423] ? syscall_enter_from_user_mode+0x21/0x70 [ 2544.872010][T26423] do_syscall_64+0x35/0xb0 [ 2544.876454][T26423] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2544.882364][T26423] RIP: 0033:0x7f2d0d66eae9 [ 2544.886791][T26423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2544.906418][T26423] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2544.914856][T26423] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2544.922847][T26423] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2544.930844][T26423] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 19:22:56 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1700}, 0x0) 19:22:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84e3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2544.938830][T26423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2544.946814][T26423] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2544.954820][T26423] 19:22:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1c00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298e7) 19:22:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 4) [ 2545.127544][T26444] FAULT_INJECTION: forcing a failure. [ 2545.127544][T26444] name failslab, interval 1, probability 0, space 0, times 0 [ 2545.140400][T26444] CPU: 0 PID: 26444 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2545.148837][T26444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2545.158906][T26444] Call Trace: [ 2545.162194][T26444] [ 2545.165139][T26444] dump_stack_lvl+0xcd/0x134 [ 2545.169754][T26444] should_fail.cold+0x5/0xa [ 2545.174289][T26444] should_failslab+0x5/0x10 [ 2545.178815][T26444] __kmalloc_node_track_caller+0x7d/0x340 [ 2545.184552][T26444] ? netlink_sendmsg+0x967/0xda0 [ 2545.189518][T26444] __alloc_skb+0xda/0x360 [ 2545.193865][T26444] netlink_sendmsg+0x967/0xda0 [ 2545.198659][T26444] ? netlink_unicast+0x7d0/0x7d0 [ 2545.203716][T26444] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2545.209987][T26444] ? netlink_unicast+0x7d0/0x7d0 [ 2545.214946][T26444] sock_sendmsg+0xcf/0x120 [ 2545.219391][T26444] ____sys_sendmsg+0x6e8/0x810 [ 2545.224182][T26444] ? kernel_sendmsg+0x50/0x50 [ 2545.228889][T26444] ? do_recvmmsg+0x6d0/0x6d0 [ 2545.233503][T26444] ? perf_trace_lock+0xeb/0x4d0 [ 2545.238370][T26444] ? lock_chain_count+0x20/0x20 [ 2545.243248][T26444] ? check_path.constprop.0+0x50/0x50 [ 2545.248641][T26444] ___sys_sendmsg+0xf3/0x170 [ 2545.253280][T26444] ? sendmsg_copy_msghdr+0x160/0x160 [ 2545.258587][T26444] ? __fget_files+0x21b/0x3e0 [ 2545.263647][T26444] ? lock_downgrade+0x6e0/0x6e0 [ 2545.268535][T26444] ? __fget_files+0x23d/0x3e0 [ 2545.273243][T26444] ? __fget_light+0xea/0x280 [ 2545.277855][T26444] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2545.284121][T26444] __sys_sendmsg+0xe5/0x1b0 [ 2545.288680][T26444] ? __sys_sendmsg_sock+0x30/0x30 [ 2545.293731][T26444] ? syscall_enter_from_user_mode+0x21/0x70 [ 2545.299650][T26444] do_syscall_64+0x35/0xb0 [ 2545.304091][T26444] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2545.309999][T26444] RIP: 0033:0x7f2d0d66eae9 [ 2545.314425][T26444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2545.334046][T26444] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2545.342478][T26444] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2545.350464][T26444] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2545.358445][T26444] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2545.366426][T26444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 19:22:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84e4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:56 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1800}, 0x0) 19:22:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1d00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2545.374412][T26444] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2545.382417][T26444] 19:22:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298e8) 19:22:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1e00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 5) 19:22:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1f00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2545.585531][T26466] FAULT_INJECTION: forcing a failure. [ 2545.585531][T26466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2545.598696][T26466] CPU: 0 PID: 26466 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2545.607129][T26466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2545.617202][T26466] Call Trace: [ 2545.620498][T26466] [ 2545.623439][T26466] dump_stack_lvl+0xcd/0x134 [ 2545.628059][T26466] should_fail.cold+0x5/0xa [ 2545.632591][T26466] _copy_from_iter+0x389/0x1320 [ 2545.637487][T26466] ? hash_and_copy_to_iter+0x200/0x200 [ 2545.642978][T26466] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2545.648542][T26466] ? memset+0x20/0x40 [ 2545.650478][T26468] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2545.652561][T26466] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2545.652603][T26466] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2545.652637][T26466] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2545.670709][T26468] device 1191 entered promiscuous mode [ 2545.673260][T26466] ? __phys_addr+0xc4/0x140 [ 2545.689514][T26466] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2545.695781][T26466] ? __phys_addr_symbol+0x2c/0x70 [ 2545.700830][T26466] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2545.706571][T26466] ? __check_object_size+0x16e/0x3f0 [ 2545.711881][T26466] netlink_sendmsg+0x7d5/0xda0 [ 2545.716658][T26466] ? netlink_unicast+0x7d0/0x7d0 [ 2545.721606][T26466] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2545.727853][T26466] ? netlink_unicast+0x7d0/0x7d0 [ 2545.732792][T26466] sock_sendmsg+0xcf/0x120 [ 2545.737218][T26466] ____sys_sendmsg+0x6e8/0x810 [ 2545.741988][T26466] ? kernel_sendmsg+0x50/0x50 [ 2545.747102][T26466] ? do_recvmmsg+0x6d0/0x6d0 [ 2545.751694][T26466] ? perf_trace_lock+0xeb/0x4d0 [ 2545.756546][T26466] ? lock_chain_count+0x20/0x20 [ 2545.761400][T26466] ? check_path.constprop.0+0x50/0x50 [ 2545.766792][T26466] ___sys_sendmsg+0xf3/0x170 [ 2545.771390][T26466] ? sendmsg_copy_msghdr+0x160/0x160 [ 2545.776684][T26466] ? __fget_files+0x21b/0x3e0 [ 2545.781367][T26466] ? lock_downgrade+0x6e0/0x6e0 [ 2545.786235][T26466] ? __fget_files+0x23d/0x3e0 [ 2545.790917][T26466] ? __fget_light+0xea/0x280 [ 2545.795559][T26466] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2545.801803][T26466] __sys_sendmsg+0xe5/0x1b0 [ 2545.806303][T26466] ? __sys_sendmsg_sock+0x30/0x30 [ 2545.811334][T26466] ? syscall_enter_from_user_mode+0x21/0x70 [ 2545.817236][T26466] do_syscall_64+0x35/0xb0 [ 2545.821653][T26466] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2545.827574][T26466] RIP: 0033:0x7f2d0d66eae9 [ 2545.831990][T26466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2545.851595][T26466] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2545.860118][T26466] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2545.868092][T26466] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2545.876059][T26466] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 19:22:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84e5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2545.884029][T26466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2545.892166][T26466] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2545.900144][T26466] 19:22:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2000, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 6) [ 2546.062777][T26480] FAULT_INJECTION: forcing a failure. [ 2546.062777][T26480] name failslab, interval 1, probability 0, space 0, times 0 [ 2546.075757][T26480] CPU: 0 PID: 26480 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2546.084201][T26480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2546.094270][T26480] Call Trace: [ 2546.097553][T26480] [ 2546.100495][T26480] dump_stack_lvl+0xcd/0x134 [ 2546.105108][T26480] should_fail.cold+0x5/0xa [ 2546.109645][T26480] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 2546.116960][T26480] should_failslab+0x5/0x10 [ 2546.121480][T26480] __kmalloc+0x72/0x320 [ 2546.125657][T26480] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 2546.132804][T26480] genl_family_rcv_msg_doit+0xda/0x320 [ 2546.138299][T26480] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2546.145697][T26480] ? mutex_lock_io_nested+0x1150/0x1150 [ 2546.151268][T26480] ? __lock_acquire+0x162f/0x54a0 [ 2546.156323][T26480] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2546.162586][T26480] ? __radix_tree_lookup+0x211/0x2a0 [ 2546.167894][T26480] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2546.174156][T26480] ? genl_get_cmd+0x3cf/0x480 [ 2546.178864][T26480] genl_rcv_msg+0x328/0x580 [ 2546.183401][T26480] ? genl_get_cmd+0x480/0x480 [ 2546.188101][T26480] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2546.194370][T26480] ? lock_release+0x720/0x720 [ 2546.199071][T26480] ? check_path.constprop.0+0x50/0x50 [ 2546.204472][T26480] netlink_rcv_skb+0x153/0x420 [ 2546.209288][T26480] ? genl_get_cmd+0x480/0x480 [ 2546.213987][T26480] ? netlink_ack+0xa60/0xa60 [ 2546.218610][T26480] ? netlink_deliver_tap+0x1b1/0xc30 [ 2546.223912][T26480] ? _copy_from_iter+0x12b/0x1320 [ 2546.228966][T26480] genl_rcv+0x24/0x40 [ 2546.232966][T26480] netlink_unicast+0x533/0x7d0 [ 2546.237759][T26480] ? netlink_attachskb+0x880/0x880 [ 2546.242894][T26480] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2546.249155][T26480] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2546.255417][T26480] ? __phys_addr_symbol+0x2c/0x70 [ 2546.260463][T26480] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2546.266221][T26480] ? __check_object_size+0x16e/0x3f0 [ 2546.271529][T26480] netlink_sendmsg+0x86d/0xda0 [ 2546.276460][T26480] ? netlink_unicast+0x7d0/0x7d0 [ 2546.281432][T26480] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2546.287699][T26480] ? netlink_unicast+0x7d0/0x7d0 [ 2546.292656][T26480] sock_sendmsg+0xcf/0x120 [ 2546.297097][T26480] ____sys_sendmsg+0x6e8/0x810 [ 2546.301889][T26480] ? kernel_sendmsg+0x50/0x50 [ 2546.306588][T26480] ? do_recvmmsg+0x6d0/0x6d0 [ 2546.311203][T26480] ? perf_trace_lock+0xeb/0x4d0 [ 2546.316072][T26480] ? lock_chain_count+0x20/0x20 [ 2546.320945][T26480] ? check_path.constprop.0+0x50/0x50 [ 2546.326428][T26480] ___sys_sendmsg+0xf3/0x170 [ 2546.331039][T26480] ? sendmsg_copy_msghdr+0x160/0x160 [ 2546.336349][T26480] ? __fget_files+0x21b/0x3e0 [ 2546.341049][T26480] ? lock_downgrade+0x6e0/0x6e0 [ 2546.345937][T26480] ? __fget_files+0x23d/0x3e0 [ 2546.350643][T26480] ? __fget_light+0xea/0x280 [ 2546.355258][T26480] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2546.361566][T26480] __sys_sendmsg+0xe5/0x1b0 [ 2546.366174][T26480] ? __sys_sendmsg_sock+0x30/0x30 [ 2546.371238][T26480] ? syscall_enter_from_user_mode+0x21/0x70 [ 2546.377161][T26480] do_syscall_64+0x35/0xb0 [ 2546.381599][T26480] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2546.387512][T26480] RIP: 0033:0x7f2d0d66eae9 [ 2546.391945][T26480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:22:57 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1900}, 0x0) 19:22:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84e6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298e9) [ 2546.411571][T26480] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2546.420005][T26480] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2546.427990][T26480] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2546.435973][T26480] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2546.443952][T26480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2546.451937][T26480] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2546.459944][T26480] 19:22:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2100, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 7) 19:22:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2200, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2546.613692][T26500] FAULT_INJECTION: forcing a failure. [ 2546.613692][T26500] name failslab, interval 1, probability 0, space 0, times 0 [ 2546.626473][T26500] CPU: 0 PID: 26500 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2546.634996][T26500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2546.645067][T26500] Call Trace: [ 2546.648354][T26500] [ 2546.651301][T26500] dump_stack_lvl+0xcd/0x134 [ 2546.655918][T26500] should_fail.cold+0x5/0xa [ 2546.660457][T26500] ? tipc_aead_init.constprop.0+0x55/0x8f0 [ 2546.666282][T26500] should_failslab+0x5/0x10 [ 2546.670806][T26500] kmem_cache_alloc_trace+0x55/0x2b0 [ 2546.676124][T26500] tipc_aead_init.constprop.0+0x55/0x8f0 [ 2546.681784][T26500] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2546.688060][T26500] ? __crypto_alg_lookup+0x2ad/0x310 [ 2546.693381][T26500] tipc_crypto_key_init+0x82/0x110 [ 2546.698515][T26500] ? tipc_ehdr_validate+0x240/0x240 [ 2546.703731][T26500] ? crypto_mod_put+0x8c/0x100 [ 2546.708533][T26500] tipc_nl_node_set_key+0xa5d/0xf70 [ 2546.713762][T26500] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2546.720044][T26500] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2546.726312][T26500] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2546.733707][T26500] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2546.741212][T26500] genl_family_rcv_msg_doit+0x228/0x320 [ 2546.746798][T26500] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2546.754194][T26500] ? mutex_lock_io_nested+0x1150/0x1150 [ 2546.759797][T26500] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2546.766066][T26500] ? __radix_tree_lookup+0x211/0x2a0 [ 2546.771376][T26500] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2546.777641][T26500] ? genl_get_cmd+0x3cf/0x480 [ 2546.782348][T26500] genl_rcv_msg+0x328/0x580 [ 2546.786921][T26500] ? genl_get_cmd+0x480/0x480 [ 2546.791633][T26500] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2546.797908][T26500] ? lock_release+0x720/0x720 [ 2546.802610][T26500] ? check_path.constprop.0+0x50/0x50 [ 2546.808018][T26500] netlink_rcv_skb+0x153/0x420 [ 2546.812809][T26500] ? genl_get_cmd+0x480/0x480 [ 2546.817515][T26500] ? netlink_ack+0xa60/0xa60 [ 2546.822138][T26500] ? netlink_deliver_tap+0x1b1/0xc30 [ 2546.827447][T26500] ? _copy_from_iter+0x12b/0x1320 [ 2546.832506][T26500] genl_rcv+0x24/0x40 [ 2546.836520][T26500] netlink_unicast+0x533/0x7d0 [ 2546.841316][T26500] ? netlink_attachskb+0x880/0x880 [ 2546.846442][T26500] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2546.852795][T26500] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2546.859069][T26500] ? __phys_addr_symbol+0x2c/0x70 [ 2546.864152][T26500] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2546.869899][T26500] ? __check_object_size+0x16e/0x3f0 [ 2546.875218][T26500] netlink_sendmsg+0x86d/0xda0 [ 2546.880029][T26500] ? netlink_unicast+0x7d0/0x7d0 [ 2546.885005][T26500] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2546.891279][T26500] ? netlink_unicast+0x7d0/0x7d0 [ 2546.896242][T26500] sock_sendmsg+0xcf/0x120 [ 2546.900861][T26500] ____sys_sendmsg+0x6e8/0x810 [ 2546.905666][T26500] ? kernel_sendmsg+0x50/0x50 [ 2546.910368][T26500] ? do_recvmmsg+0x6d0/0x6d0 [ 2546.914984][T26500] ? perf_trace_lock+0xeb/0x4d0 [ 2546.919856][T26500] ? lock_chain_count+0x20/0x20 [ 2546.924736][T26500] ? check_path.constprop.0+0x50/0x50 [ 2546.930224][T26500] ___sys_sendmsg+0xf3/0x170 [ 2546.934834][T26500] ? sendmsg_copy_msghdr+0x160/0x160 [ 2546.940145][T26500] ? __fget_files+0x21b/0x3e0 [ 2546.944847][T26500] ? lock_downgrade+0x6e0/0x6e0 [ 2546.949737][T26500] ? __fget_files+0x23d/0x3e0 [ 2546.954445][T26500] ? __fget_light+0xea/0x280 [ 2546.959059][T26500] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2546.965332][T26500] __sys_sendmsg+0xe5/0x1b0 [ 2546.969858][T26500] ? __sys_sendmsg_sock+0x30/0x30 [ 2546.974924][T26500] ? syscall_enter_from_user_mode+0x21/0x70 [ 2546.980847][T26500] do_syscall_64+0x35/0xb0 [ 2546.985292][T26500] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2546.991209][T26500] RIP: 0033:0x7f2d0d66eae9 [ 2546.995647][T26500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2547.015282][T26500] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2547.023714][T26500] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2547.031706][T26500] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2547.039697][T26500] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2547.047685][T26500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2547.055667][T26500] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 19:22:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:58 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1a00}, 0x0) 19:22:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298ea) 19:22:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84e7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2547.063761][T26500] 19:22:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2300, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2400, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2547.192496][T26513] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2547.211370][T26513] device 1192 entered promiscuous mode 19:22:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 8) 19:22:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2500, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2547.365509][T26528] FAULT_INJECTION: forcing a failure. [ 2547.365509][T26528] name failslab, interval 1, probability 0, space 0, times 0 [ 2547.378236][T26528] CPU: 0 PID: 26528 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2547.386675][T26528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2547.396747][T26528] Call Trace: [ 2547.400041][T26528] [ 2547.402985][T26528] dump_stack_lvl+0xcd/0x134 [ 2547.407605][T26528] should_fail.cold+0x5/0xa [ 2547.412145][T26528] ? crypto_create_tfm_node+0x7f/0x320 [ 2547.417633][T26528] should_failslab+0x5/0x10 [ 2547.422170][T26528] __kmalloc_node+0x75/0x370 [ 2547.426793][T26528] crypto_create_tfm_node+0x7f/0x320 [ 2547.432105][T26528] crypto_alloc_tfm_node+0x107/0x260 [ 2547.437422][T26528] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2547.443169][T26528] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2547.449441][T26528] tipc_crypto_key_init+0x82/0x110 [ 2547.454563][T26528] ? tipc_ehdr_validate+0x240/0x240 [ 2547.459781][T26528] ? crypto_mod_put+0x8c/0x100 [ 2547.464555][T26528] tipc_nl_node_set_key+0xa5d/0xf70 [ 2547.469763][T26528] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2547.476030][T26528] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2547.482275][T26528] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2547.489662][T26528] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2547.496959][T26528] genl_family_rcv_msg_doit+0x228/0x320 [ 2547.502512][T26528] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2547.509900][T26528] ? mutex_lock_io_nested+0x1150/0x1150 [ 2547.515458][T26528] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2547.521722][T26528] ? __radix_tree_lookup+0x211/0x2a0 [ 2547.527010][T26528] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2547.533272][T26528] ? genl_get_cmd+0x3cf/0x480 [ 2547.537959][T26528] genl_rcv_msg+0x328/0x580 [ 2547.542470][T26528] ? genl_get_cmd+0x480/0x480 [ 2547.547151][T26528] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2547.553404][T26528] ? lock_release+0x720/0x720 [ 2547.558082][T26528] ? check_path.constprop.0+0x50/0x50 [ 2547.563461][T26528] netlink_rcv_skb+0x153/0x420 [ 2547.568226][T26528] ? genl_get_cmd+0x480/0x480 [ 2547.572906][T26528] ? netlink_ack+0xa60/0xa60 [ 2547.577507][T26528] ? netlink_deliver_tap+0x1b1/0xc30 [ 2547.582794][T26528] ? _copy_from_iter+0x12b/0x1320 [ 2547.587830][T26528] genl_rcv+0x24/0x40 [ 2547.591811][T26528] netlink_unicast+0x533/0x7d0 [ 2547.596580][T26528] ? netlink_attachskb+0x880/0x880 [ 2547.601709][T26528] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2547.607956][T26528] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2547.614197][T26528] ? __phys_addr_symbol+0x2c/0x70 [ 2547.619221][T26528] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2547.624940][T26528] ? __check_object_size+0x16e/0x3f0 [ 2547.630227][T26528] netlink_sendmsg+0x86d/0xda0 [ 2547.634998][T26528] ? netlink_unicast+0x7d0/0x7d0 [ 2547.639944][T26528] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2547.646205][T26528] ? netlink_unicast+0x7d0/0x7d0 [ 2547.651145][T26528] sock_sendmsg+0xcf/0x120 [ 2547.655568][T26528] ____sys_sendmsg+0x6e8/0x810 [ 2547.660359][T26528] ? kernel_sendmsg+0x50/0x50 [ 2547.665035][T26528] ? do_recvmmsg+0x6d0/0x6d0 [ 2547.669625][T26528] ? perf_trace_lock+0xeb/0x4d0 [ 2547.674472][T26528] ? lock_chain_count+0x20/0x20 [ 2547.679342][T26528] ? check_path.constprop.0+0x50/0x50 [ 2547.684718][T26528] ___sys_sendmsg+0xf3/0x170 [ 2547.689307][T26528] ? sendmsg_copy_msghdr+0x160/0x160 [ 2547.694603][T26528] ? __fget_files+0x21b/0x3e0 [ 2547.699367][T26528] ? lock_downgrade+0x6e0/0x6e0 [ 2547.704229][T26528] ? __fget_files+0x23d/0x3e0 [ 2547.708912][T26528] ? __fget_light+0xea/0x280 [ 2547.713511][T26528] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2547.719756][T26528] __sys_sendmsg+0xe5/0x1b0 [ 2547.724259][T26528] ? __sys_sendmsg_sock+0x30/0x30 [ 2547.729296][T26528] ? syscall_enter_from_user_mode+0x21/0x70 [ 2547.735192][T26528] do_syscall_64+0x35/0xb0 [ 2547.740044][T26528] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2547.745937][T26528] RIP: 0033:0x7f2d0d66eae9 [ 2547.750350][T26528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2547.769954][T26528] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2547.778362][T26528] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2547.786325][T26528] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2547.794288][T26528] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2547.802252][T26528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 19:22:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84e8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:22:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2547.810229][T26528] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2547.818229][T26528] 19:22:59 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1b00}, 0x0) 19:22:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2600, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 9) 19:22:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2700, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2548.007129][T26540] FAULT_INJECTION: forcing a failure. [ 2548.007129][T26540] name failslab, interval 1, probability 0, space 0, times 0 [ 2548.019944][T26540] CPU: 0 PID: 26540 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2548.028387][T26540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2548.038466][T26540] Call Trace: [ 2548.041760][T26540] [ 2548.044704][T26540] dump_stack_lvl+0xcd/0x134 [ 2548.049321][T26540] should_fail.cold+0x5/0xa [ 2548.053860][T26540] ? crypto_create_tfm_node+0x7f/0x320 [ 2548.059344][T26540] should_failslab+0x5/0x10 [ 2548.063870][T26540] __kmalloc_node+0x75/0x370 [ 2548.068494][T26540] crypto_create_tfm_node+0x7f/0x320 [ 2548.073811][T26540] crypto_alloc_tfm_node+0x107/0x260 [ 2548.079131][T26540] cryptd_alloc_aead+0x101/0x200 [ 2548.084097][T26540] ? cryptd_alloc_ahash+0x200/0x200 [ 2548.089326][T26540] ? __kmalloc_node+0x62/0x370 [ 2548.094135][T26540] simd_aead_init+0x67/0x1b0 [ 2548.098747][T26540] ? simd_aead_exit+0x40/0x40 [ 2548.103446][T26540] crypto_aead_init_tfm+0x138/0x1a0 [ 2548.108675][T26540] crypto_create_tfm_node+0x10d/0x320 [ 2548.114079][T26540] crypto_alloc_tfm_node+0x107/0x260 [ 2548.119395][T26540] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2548.125139][T26540] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2548.131424][T26540] tipc_crypto_key_init+0x82/0x110 [ 2548.136565][T26540] ? tipc_ehdr_validate+0x240/0x240 [ 2548.141911][T26540] ? crypto_mod_put+0x8c/0x100 [ 2548.146706][T26540] tipc_nl_node_set_key+0xa5d/0xf70 [ 2548.151933][T26540] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2548.158211][T26540] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2548.164474][T26540] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2548.171872][T26540] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2548.179192][T26540] genl_family_rcv_msg_doit+0x228/0x320 [ 2548.184770][T26540] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2548.192168][T26540] ? mutex_lock_io_nested+0x1150/0x1150 [ 2548.197756][T26540] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2548.204024][T26540] ? __radix_tree_lookup+0x211/0x2a0 [ 2548.209334][T26540] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2548.215603][T26540] ? genl_get_cmd+0x3cf/0x480 [ 2548.220312][T26540] genl_rcv_msg+0x328/0x580 [ 2548.224853][T26540] ? genl_get_cmd+0x480/0x480 [ 2548.229584][T26540] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2548.235940][T26540] ? lock_release+0x720/0x720 [ 2548.240633][T26540] ? check_path.constprop.0+0x50/0x50 [ 2548.246034][T26540] netlink_rcv_skb+0x153/0x420 [ 2548.250826][T26540] ? genl_get_cmd+0x480/0x480 [ 2548.255572][T26540] ? netlink_ack+0xa60/0xa60 [ 2548.260195][T26540] ? netlink_deliver_tap+0x1b1/0xc30 [ 2548.265502][T26540] ? _copy_from_iter+0x12b/0x1320 [ 2548.270565][T26540] genl_rcv+0x24/0x40 [ 2548.274570][T26540] netlink_unicast+0x533/0x7d0 [ 2548.279366][T26540] ? netlink_attachskb+0x880/0x880 [ 2548.284499][T26540] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2548.290776][T26540] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2548.297040][T26540] ? __phys_addr_symbol+0x2c/0x70 [ 2548.302086][T26540] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2548.307829][T26540] ? __check_object_size+0x16e/0x3f0 [ 2548.313143][T26540] netlink_sendmsg+0x86d/0xda0 [ 2548.317941][T26540] ? netlink_unicast+0x7d0/0x7d0 [ 2548.322911][T26540] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2548.329178][T26540] ? netlink_unicast+0x7d0/0x7d0 [ 2548.334152][T26540] sock_sendmsg+0xcf/0x120 [ 2548.338601][T26540] ____sys_sendmsg+0x6e8/0x810 [ 2548.343417][T26540] ? kernel_sendmsg+0x50/0x50 [ 2548.348123][T26540] ? do_recvmmsg+0x6d0/0x6d0 [ 2548.352739][T26540] ? perf_trace_lock+0xeb/0x4d0 [ 2548.357606][T26540] ? lock_chain_count+0x20/0x20 [ 2548.362484][T26540] ? check_path.constprop.0+0x50/0x50 [ 2548.367890][T26540] ___sys_sendmsg+0xf3/0x170 [ 2548.372501][T26540] ? sendmsg_copy_msghdr+0x160/0x160 [ 2548.377822][T26540] ? __fget_files+0x21b/0x3e0 [ 2548.382527][T26540] ? lock_downgrade+0x6e0/0x6e0 [ 2548.387408][T26540] ? __fget_files+0x23d/0x3e0 [ 2548.392140][T26540] ? __fget_light+0xea/0x280 [ 2548.396754][T26540] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2548.403028][T26540] __sys_sendmsg+0xe5/0x1b0 [ 2548.407552][T26540] ? __sys_sendmsg_sock+0x30/0x30 [ 2548.412616][T26540] ? syscall_enter_from_user_mode+0x21/0x70 [ 2548.418540][T26540] do_syscall_64+0x35/0xb0 [ 2548.422981][T26540] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2548.428891][T26540] RIP: 0033:0x7f2d0d66eae9 [ 2548.433320][T26540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:22:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298eb) 19:22:59 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1c00}, 0x0) [ 2548.452944][T26540] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2548.461382][T26540] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2548.469366][T26540] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2548.477351][T26540] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2548.485335][T26540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2548.493319][T26540] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2548.501329][T26540] 19:22:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2800, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:22:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 10) 19:22:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2900, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2548.675051][T26563] FAULT_INJECTION: forcing a failure. [ 2548.675051][T26563] name failslab, interval 1, probability 0, space 0, times 0 [ 2548.687815][T26563] CPU: 0 PID: 26563 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2548.696253][T26563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2548.706329][T26563] Call Trace: [ 2548.709707][T26563] [ 2548.712653][T26563] dump_stack_lvl+0xcd/0x134 [ 2548.717269][T26563] should_fail.cold+0x5/0xa [ 2548.721804][T26563] ? crypto_create_tfm_node+0x7f/0x320 [ 2548.727288][T26563] should_failslab+0x5/0x10 [ 2548.731818][T26563] __kmalloc_node+0x75/0x370 [ 2548.736442][T26563] crypto_create_tfm_node+0x7f/0x320 [ 2548.741761][T26563] crypto_spawn_tfm2+0x60/0xb0 [ 2548.746548][T26563] ? cryptd_hash_init_tfm+0x120/0x120 [ 2548.751950][T26563] cryptd_aead_init_tfm+0x3c/0x140 [ 2548.757096][T26563] ? cryptd_hash_init_tfm+0x120/0x120 [ 2548.762496][T26563] crypto_aead_init_tfm+0x138/0x1a0 [ 2548.767724][T26563] crypto_create_tfm_node+0x10d/0x320 [ 2548.773121][T26563] crypto_alloc_tfm_node+0x107/0x260 [ 2548.778437][T26563] cryptd_alloc_aead+0x101/0x200 [ 2548.783401][T26563] ? cryptd_alloc_ahash+0x200/0x200 [ 2548.788633][T26563] ? __kmalloc_node+0x62/0x370 [ 2548.793450][T26563] simd_aead_init+0x67/0x1b0 [ 2548.798064][T26563] ? simd_aead_exit+0x40/0x40 [ 2548.802761][T26563] crypto_aead_init_tfm+0x138/0x1a0 [ 2548.807990][T26563] crypto_create_tfm_node+0x10d/0x320 [ 2548.813388][T26563] crypto_alloc_tfm_node+0x107/0x260 [ 2548.818701][T26563] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2548.824445][T26563] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2548.830720][T26563] tipc_crypto_key_init+0x82/0x110 [ 2548.835856][T26563] ? tipc_ehdr_validate+0x240/0x240 [ 2548.841072][T26563] ? crypto_mod_put+0x8c/0x100 [ 2548.845878][T26563] tipc_nl_node_set_key+0xa5d/0xf70 [ 2548.851106][T26563] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2548.857378][T26563] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2548.863646][T26563] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2548.871041][T26563] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2548.878359][T26563] genl_family_rcv_msg_doit+0x228/0x320 [ 2548.883934][T26563] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2548.891333][T26563] ? mutex_lock_io_nested+0x1150/0x1150 [ 2548.896919][T26563] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2548.903189][T26563] ? __radix_tree_lookup+0x211/0x2a0 [ 2548.908496][T26563] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2548.914760][T26563] ? genl_get_cmd+0x3cf/0x480 [ 2548.919468][T26563] genl_rcv_msg+0x328/0x580 [ 2548.924003][T26563] ? genl_get_cmd+0x480/0x480 [ 2548.928702][T26563] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2548.934972][T26563] ? lock_release+0x720/0x720 [ 2548.939668][T26563] ? check_path.constprop.0+0x50/0x50 [ 2548.945064][T26563] netlink_rcv_skb+0x153/0x420 [ 2548.949852][T26563] ? genl_get_cmd+0x480/0x480 [ 2548.954554][T26563] ? netlink_ack+0xa60/0xa60 [ 2548.959174][T26563] ? netlink_deliver_tap+0x1b1/0xc30 [ 2548.964491][T26563] ? _copy_from_iter+0x12b/0x1320 [ 2548.969548][T26563] genl_rcv+0x24/0x40 [ 2548.973552][T26563] netlink_unicast+0x533/0x7d0 [ 2548.978345][T26563] ? netlink_attachskb+0x880/0x880 [ 2548.983479][T26563] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2548.989749][T26563] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2548.996015][T26563] ? __phys_addr_symbol+0x2c/0x70 [ 2549.001057][T26563] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2549.006799][T26563] ? __check_object_size+0x16e/0x3f0 [ 2549.012111][T26563] netlink_sendmsg+0x86d/0xda0 [ 2549.016904][T26563] ? netlink_unicast+0x7d0/0x7d0 [ 2549.021870][T26563] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2549.028156][T26563] ? netlink_unicast+0x7d0/0x7d0 [ 2549.033117][T26563] sock_sendmsg+0xcf/0x120 [ 2549.037562][T26563] ____sys_sendmsg+0x6e8/0x810 [ 2549.042352][T26563] ? kernel_sendmsg+0x50/0x50 [ 2549.047080][T26563] ? do_recvmmsg+0x6d0/0x6d0 [ 2549.051704][T26563] ? perf_trace_lock+0xeb/0x4d0 [ 2549.056571][T26563] ? lock_chain_count+0x20/0x20 [ 2549.061454][T26563] ? check_path.constprop.0+0x50/0x50 [ 2549.066850][T26563] ___sys_sendmsg+0xf3/0x170 [ 2549.071464][T26563] ? sendmsg_copy_msghdr+0x160/0x160 [ 2549.076775][T26563] ? __fget_files+0x21b/0x3e0 [ 2549.081480][T26563] ? lock_downgrade+0x6e0/0x6e0 [ 2549.086372][T26563] ? __fget_files+0x23d/0x3e0 [ 2549.091089][T26563] ? __fget_light+0xea/0x280 [ 2549.095702][T26563] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2549.101980][T26563] __sys_sendmsg+0xe5/0x1b0 [ 2549.106501][T26563] ? __sys_sendmsg_sock+0x30/0x30 [ 2549.111562][T26563] ? syscall_enter_from_user_mode+0x21/0x70 [ 2549.117483][T26563] do_syscall_64+0x35/0xb0 [ 2549.121924][T26563] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2549.127836][T26563] RIP: 0033:0x7f2d0d66eae9 [ 2549.132271][T26563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2549.151898][T26563] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2549.160334][T26563] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2549.168321][T26563] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 19:23:00 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1d00}, 0x0) 19:23:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84e9}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:00 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298ec) 19:23:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2549.176304][T26563] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2549.184290][T26563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2549.192275][T26563] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2549.200285][T26563] 19:23:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2a00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 11) [ 2549.326411][T26577] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2549.345042][T26577] device 1193 entered promiscuous mode [ 2549.367263][T26587] FAULT_INJECTION: forcing a failure. [ 2549.367263][T26587] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.380055][T26587] CPU: 0 PID: 26587 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2549.388496][T26587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2549.398566][T26587] Call Trace: [ 2549.401854][T26587] [ 2549.404797][T26587] dump_stack_lvl+0xcd/0x134 [ 2549.409412][T26587] should_fail.cold+0x5/0xa [ 2549.413988][T26587] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2549.419903][T26587] should_failslab+0x5/0x10 [ 2549.424433][T26587] kmem_cache_alloc_trace+0x55/0x2b0 [ 2549.429745][T26587] ? crypto_aead_setkey+0x10f/0x290 [ 2549.434980][T26587] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2549.440747][T26587] tipc_crypto_key_init+0x82/0x110 [ 2549.445889][T26587] ? tipc_ehdr_validate+0x240/0x240 [ 2549.451107][T26587] ? crypto_mod_put+0x8c/0x100 [ 2549.455905][T26587] tipc_nl_node_set_key+0xa5d/0xf70 [ 2549.461134][T26587] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2549.467407][T26587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2549.473679][T26587] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2549.481078][T26587] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2549.488403][T26587] genl_family_rcv_msg_doit+0x228/0x320 [ 2549.493986][T26587] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2549.501389][T26587] ? mutex_lock_io_nested+0x1150/0x1150 [ 2549.506984][T26587] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2549.513253][T26587] ? __radix_tree_lookup+0x211/0x2a0 [ 2549.518563][T26587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2549.524830][T26587] ? genl_get_cmd+0x3cf/0x480 [ 2549.529539][T26587] genl_rcv_msg+0x328/0x580 [ 2549.534074][T26587] ? genl_get_cmd+0x480/0x480 [ 2549.538775][T26587] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2549.545040][T26587] ? lock_release+0x720/0x720 [ 2549.549739][T26587] ? check_path.constprop.0+0x50/0x50 [ 2549.555143][T26587] netlink_rcv_skb+0x153/0x420 [ 2549.559934][T26587] ? genl_get_cmd+0x480/0x480 [ 2549.564638][T26587] ? netlink_ack+0xa60/0xa60 [ 2549.569261][T26587] ? netlink_deliver_tap+0x1b1/0xc30 [ 2549.574567][T26587] ? _copy_from_iter+0x12b/0x1320 [ 2549.579626][T26587] genl_rcv+0x24/0x40 [ 2549.583630][T26587] netlink_unicast+0x533/0x7d0 [ 2549.588430][T26587] ? netlink_attachskb+0x880/0x880 [ 2549.593565][T26587] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2549.599832][T26587] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2549.606097][T26587] ? __phys_addr_symbol+0x2c/0x70 [ 2549.611141][T26587] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2549.616884][T26587] ? __check_object_size+0x16e/0x3f0 [ 2549.622207][T26587] netlink_sendmsg+0x86d/0xda0 [ 2549.627008][T26587] ? netlink_unicast+0x7d0/0x7d0 [ 2549.631979][T26587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2549.638276][T26587] ? netlink_unicast+0x7d0/0x7d0 [ 2549.643238][T26587] sock_sendmsg+0xcf/0x120 [ 2549.647681][T26587] ____sys_sendmsg+0x6e8/0x810 [ 2549.652474][T26587] ? kernel_sendmsg+0x50/0x50 [ 2549.657173][T26587] ? do_recvmmsg+0x6d0/0x6d0 [ 2549.661783][T26587] ? perf_trace_lock+0xeb/0x4d0 [ 2549.666658][T26587] ? lock_chain_count+0x20/0x20 [ 2549.671542][T26587] ? check_path.constprop.0+0x50/0x50 [ 2549.677043][T26587] ___sys_sendmsg+0xf3/0x170 [ 2549.681657][T26587] ? sendmsg_copy_msghdr+0x160/0x160 [ 2549.686974][T26587] ? __fget_files+0x21b/0x3e0 [ 2549.691678][T26587] ? lock_downgrade+0x6e0/0x6e0 [ 2549.696570][T26587] ? __fget_files+0x23d/0x3e0 [ 2549.701280][T26587] ? __fget_light+0xea/0x280 [ 2549.705895][T26587] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2549.712176][T26587] __sys_sendmsg+0xe5/0x1b0 [ 2549.716706][T26587] ? __sys_sendmsg_sock+0x30/0x30 [ 2549.721772][T26587] ? syscall_enter_from_user_mode+0x21/0x70 [ 2549.727695][T26587] do_syscall_64+0x35/0xb0 [ 2549.732133][T26587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2549.738045][T26587] RIP: 0033:0x7f2d0d66eae9 [ 2549.742476][T26587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:23:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298ed) 19:23:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84ea}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:01 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1e00}, 0x0) 19:23:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2b00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2549.762105][T26587] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2549.770544][T26587] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2549.778532][T26587] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2549.786562][T26587] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2549.794550][T26587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2549.802536][T26587] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2549.810545][T26587] 19:23:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 12) 19:23:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2c00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2549.943806][T26603] FAULT_INJECTION: forcing a failure. [ 2549.943806][T26603] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.956527][T26603] CPU: 0 PID: 26603 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2549.964969][T26603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2549.975050][T26603] Call Trace: [ 2549.978343][T26603] [ 2549.981290][T26603] dump_stack_lvl+0xcd/0x134 [ 2549.985908][T26603] should_fail.cold+0x5/0xa [ 2549.990449][T26603] ? crypto_create_tfm_node+0x7f/0x320 [ 2549.995935][T26603] should_failslab+0x5/0x10 [ 2550.000463][T26603] __kmalloc_node+0x75/0x370 [ 2550.005074][T26603] crypto_create_tfm_node+0x7f/0x320 [ 2550.010367][T26603] crypto_alloc_tfm_node+0x107/0x260 [ 2550.015675][T26603] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2550.021415][T26603] tipc_crypto_key_init+0x82/0x110 [ 2550.026545][T26603] ? tipc_ehdr_validate+0x240/0x240 [ 2550.031763][T26603] ? crypto_mod_put+0x8c/0x100 [ 2550.036550][T26603] tipc_nl_node_set_key+0xa5d/0xf70 [ 2550.041760][T26603] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2550.048022][T26603] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2550.054278][T26603] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2550.061674][T26603] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2550.068976][T26603] genl_family_rcv_msg_doit+0x228/0x320 [ 2550.074536][T26603] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2550.081913][T26603] ? mutex_lock_io_nested+0x1150/0x1150 [ 2550.087490][T26603] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2550.093747][T26603] ? __radix_tree_lookup+0x211/0x2a0 [ 2550.099035][T26603] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2550.105277][T26603] ? genl_get_cmd+0x3cf/0x480 [ 2550.110393][T26603] genl_rcv_msg+0x328/0x580 [ 2550.114901][T26603] ? genl_get_cmd+0x480/0x480 [ 2550.119579][T26603] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2550.125828][T26603] ? lock_release+0x720/0x720 [ 2550.130519][T26603] ? check_path.constprop.0+0x50/0x50 [ 2550.135896][T26603] netlink_rcv_skb+0x153/0x420 [ 2550.140661][T26603] ? genl_get_cmd+0x480/0x480 [ 2550.145344][T26603] ? netlink_ack+0xa60/0xa60 [ 2550.149941][T26603] ? netlink_deliver_tap+0x1b1/0xc30 [ 2550.155228][T26603] ? _copy_from_iter+0x12b/0x1320 [ 2550.160274][T26603] genl_rcv+0x24/0x40 [ 2550.164254][T26603] netlink_unicast+0x533/0x7d0 [ 2550.169036][T26603] ? netlink_attachskb+0x880/0x880 [ 2550.174144][T26603] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2550.180402][T26603] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2550.186649][T26603] ? __phys_addr_symbol+0x2c/0x70 [ 2550.191679][T26603] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2550.197396][T26603] ? __check_object_size+0x16e/0x3f0 [ 2550.202685][T26603] netlink_sendmsg+0x86d/0xda0 [ 2550.207456][T26603] ? netlink_unicast+0x7d0/0x7d0 [ 2550.212412][T26603] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2550.218655][T26603] ? netlink_unicast+0x7d0/0x7d0 [ 2550.223607][T26603] sock_sendmsg+0xcf/0x120 [ 2550.228027][T26603] ____sys_sendmsg+0x6e8/0x810 [ 2550.232802][T26603] ? kernel_sendmsg+0x50/0x50 [ 2550.237480][T26603] ? do_recvmmsg+0x6d0/0x6d0 [ 2550.242166][T26603] ? perf_trace_lock+0xeb/0x4d0 [ 2550.247015][T26603] ? lock_chain_count+0x20/0x20 [ 2550.251868][T26603] ? check_path.constprop.0+0x50/0x50 [ 2550.257243][T26603] ___sys_sendmsg+0xf3/0x170 [ 2550.261845][T26603] ? sendmsg_copy_msghdr+0x160/0x160 [ 2550.267136][T26603] ? __fget_files+0x21b/0x3e0 [ 2550.271814][T26603] ? lock_downgrade+0x6e0/0x6e0 [ 2550.276677][T26603] ? __fget_files+0x23d/0x3e0 [ 2550.281372][T26603] ? __fget_light+0xea/0x280 [ 2550.285963][T26603] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2550.292211][T26603] __sys_sendmsg+0xe5/0x1b0 [ 2550.296711][T26603] ? __sys_sendmsg_sock+0x30/0x30 [ 2550.301746][T26603] ? syscall_enter_from_user_mode+0x21/0x70 [ 2550.307645][T26603] do_syscall_64+0x35/0xb0 [ 2550.312063][T26603] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2550.317968][T26603] RIP: 0033:0x7f2d0d66eae9 [ 2550.322382][T26603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2550.342000][T26603] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2550.350409][T26603] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2550.358377][T26603] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2550.366341][T26603] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2550.374306][T26603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2550.382269][T26603] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2550.390251][T26603] 19:23:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2d00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 13) 19:23:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2e00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84eb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2550.580945][T26615] FAULT_INJECTION: forcing a failure. [ 2550.580945][T26615] name failslab, interval 1, probability 0, space 0, times 0 [ 2550.593865][T26615] CPU: 0 PID: 26615 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2550.602330][T26615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2550.612398][T26615] Call Trace: [ 2550.615692][T26615] [ 2550.618640][T26615] dump_stack_lvl+0xcd/0x134 [ 2550.623256][T26615] should_fail.cold+0x5/0xa [ 2550.627823][T26615] ? crypto_create_tfm_node+0x7f/0x320 [ 2550.633307][T26615] should_failslab+0x5/0x10 [ 2550.637831][T26615] __kmalloc_node+0x75/0x370 [ 2550.642448][T26615] crypto_create_tfm_node+0x7f/0x320 [ 2550.647771][T26615] crypto_alloc_tfm_node+0x107/0x260 [ 2550.653100][T26615] cryptd_alloc_aead+0x101/0x200 [ 2550.658060][T26615] ? cryptd_alloc_ahash+0x200/0x200 [ 2550.663290][T26615] ? __kmalloc_node+0x62/0x370 [ 2550.668099][T26615] simd_aead_init+0x67/0x1b0 [ 2550.672712][T26615] ? simd_aead_exit+0x40/0x40 [ 2550.677413][T26615] crypto_aead_init_tfm+0x138/0x1a0 [ 2550.682647][T26615] crypto_create_tfm_node+0x10d/0x320 [ 2550.688049][T26615] crypto_alloc_tfm_node+0x107/0x260 [ 2550.693361][T26615] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2550.699116][T26615] tipc_crypto_key_init+0x82/0x110 [ 2550.704259][T26615] ? tipc_ehdr_validate+0x240/0x240 [ 2550.709483][T26615] ? crypto_mod_put+0x8c/0x100 [ 2550.714279][T26615] tipc_nl_node_set_key+0xa5d/0xf70 [ 2550.719509][T26615] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2550.725782][T26615] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2550.732135][T26615] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2550.739535][T26615] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2550.746854][T26615] genl_family_rcv_msg_doit+0x228/0x320 [ 2550.752427][T26615] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2550.759833][T26615] ? mutex_lock_io_nested+0x1150/0x1150 [ 2550.765507][T26615] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2550.771782][T26615] ? __radix_tree_lookup+0x211/0x2a0 [ 2550.777107][T26615] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2550.783372][T26615] ? genl_get_cmd+0x3cf/0x480 [ 2550.788084][T26615] genl_rcv_msg+0x328/0x580 [ 2550.792620][T26615] ? genl_get_cmd+0x480/0x480 [ 2550.797322][T26615] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2550.803593][T26615] ? lock_release+0x720/0x720 [ 2550.808296][T26615] ? check_path.constprop.0+0x50/0x50 [ 2550.813700][T26615] netlink_rcv_skb+0x153/0x420 [ 2550.818498][T26615] ? genl_get_cmd+0x480/0x480 [ 2550.823212][T26615] ? netlink_ack+0xa60/0xa60 [ 2550.827841][T26615] ? netlink_deliver_tap+0x1b1/0xc30 [ 2550.833148][T26615] ? _copy_from_iter+0x12b/0x1320 [ 2550.838205][T26615] genl_rcv+0x24/0x40 [ 2550.842206][T26615] netlink_unicast+0x533/0x7d0 [ 2550.847001][T26615] ? netlink_attachskb+0x880/0x880 [ 2550.852261][T26615] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2550.858534][T26615] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2550.864835][T26615] ? __phys_addr_symbol+0x2c/0x70 [ 2550.869879][T26615] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2550.875627][T26615] ? __check_object_size+0x16e/0x3f0 [ 2550.880939][T26615] netlink_sendmsg+0x86d/0xda0 [ 2550.885736][T26615] ? netlink_unicast+0x7d0/0x7d0 [ 2550.890707][T26615] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2550.896977][T26615] ? netlink_unicast+0x7d0/0x7d0 [ 2550.901933][T26615] sock_sendmsg+0xcf/0x120 [ 2550.906479][T26615] ____sys_sendmsg+0x6e8/0x810 [ 2550.911273][T26615] ? kernel_sendmsg+0x50/0x50 [ 2550.915988][T26615] ? do_recvmmsg+0x6d0/0x6d0 [ 2550.920597][T26615] ? perf_trace_lock+0xeb/0x4d0 [ 2550.925468][T26615] ? lock_chain_count+0x20/0x20 [ 2550.930358][T26615] ? check_path.constprop.0+0x50/0x50 [ 2550.935756][T26615] ___sys_sendmsg+0xf3/0x170 [ 2550.940390][T26615] ? sendmsg_copy_msghdr+0x160/0x160 [ 2550.945701][T26615] ? __fget_files+0x21b/0x3e0 [ 2550.950402][T26615] ? lock_downgrade+0x6e0/0x6e0 [ 2550.955284][T26615] ? __fget_files+0x23d/0x3e0 [ 2550.959991][T26615] ? __fget_light+0xea/0x280 [ 2550.964603][T26615] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2550.970878][T26615] __sys_sendmsg+0xe5/0x1b0 [ 2550.975401][T26615] ? __sys_sendmsg_sock+0x30/0x30 [ 2550.980461][T26615] ? syscall_enter_from_user_mode+0x21/0x70 [ 2550.986378][T26615] do_syscall_64+0x35/0xb0 [ 2550.990820][T26615] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2550.996742][T26615] RIP: 0033:0x7f2d0d66eae9 [ 2551.001172][T26615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2551.020800][T26615] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:23:02 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1f00}, 0x0) 19:23:02 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298ee) 19:23:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2551.029327][T26615] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2551.037323][T26615] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2551.045312][T26615] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2551.053297][T26615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2551.061289][T26615] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2551.069314][T26615] 19:23:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x2f00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 14) [ 2551.204508][T26628] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 19:23:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3000, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2551.280110][T26637] FAULT_INJECTION: forcing a failure. [ 2551.280110][T26637] name failslab, interval 1, probability 0, space 0, times 0 [ 2551.293006][T26637] CPU: 0 PID: 26637 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2551.301444][T26637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2551.311515][T26637] Call Trace: [ 2551.314811][T26637] [ 2551.317753][T26637] dump_stack_lvl+0xcd/0x134 [ 2551.322379][T26637] should_fail.cold+0x5/0xa [ 2551.326916][T26637] ? crypto_create_tfm_node+0x7f/0x320 [ 2551.332399][T26637] should_failslab+0x5/0x10 [ 2551.336928][T26637] __kmalloc_node+0x75/0x370 [ 2551.341553][T26637] crypto_create_tfm_node+0x7f/0x320 [ 2551.346867][T26637] crypto_spawn_tfm2+0x60/0xb0 [ 2551.351651][T26637] ? cryptd_hash_init_tfm+0x120/0x120 [ 2551.357055][T26637] cryptd_aead_init_tfm+0x3c/0x140 [ 2551.362194][T26637] ? cryptd_hash_init_tfm+0x120/0x120 [ 2551.367682][T26637] crypto_aead_init_tfm+0x138/0x1a0 [ 2551.372910][T26637] crypto_create_tfm_node+0x10d/0x320 [ 2551.378315][T26637] crypto_alloc_tfm_node+0x107/0x260 [ 2551.383629][T26637] cryptd_alloc_aead+0x101/0x200 [ 2551.388602][T26637] ? cryptd_alloc_ahash+0x200/0x200 [ 2551.393832][T26637] ? __kmalloc_node+0x62/0x370 [ 2551.398642][T26637] simd_aead_init+0x67/0x1b0 [ 2551.403254][T26637] ? simd_aead_exit+0x40/0x40 [ 2551.407962][T26637] crypto_aead_init_tfm+0x138/0x1a0 [ 2551.413185][T26637] crypto_create_tfm_node+0x10d/0x320 [ 2551.418588][T26637] crypto_alloc_tfm_node+0x107/0x260 [ 2551.423907][T26637] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2551.429669][T26637] tipc_crypto_key_init+0x82/0x110 [ 2551.434799][T26637] ? tipc_ehdr_validate+0x240/0x240 [ 2551.440015][T26637] ? crypto_mod_put+0x8c/0x100 [ 2551.444814][T26637] tipc_nl_node_set_key+0xa5d/0xf70 [ 2551.450040][T26637] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2551.456312][T26637] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2551.462576][T26637] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2551.469971][T26637] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2551.477295][T26637] genl_family_rcv_msg_doit+0x228/0x320 [ 2551.482871][T26637] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2551.490271][T26637] ? mutex_lock_io_nested+0x1150/0x1150 [ 2551.495854][T26637] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2551.502117][T26637] ? __radix_tree_lookup+0x211/0x2a0 [ 2551.507415][T26637] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2551.513676][T26637] ? genl_get_cmd+0x3cf/0x480 [ 2551.518381][T26637] genl_rcv_msg+0x328/0x580 [ 2551.522909][T26637] ? genl_get_cmd+0x480/0x480 [ 2551.527606][T26637] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2551.533871][T26637] ? lock_release+0x720/0x720 [ 2551.538568][T26637] ? check_path.constprop.0+0x50/0x50 [ 2551.543967][T26637] netlink_rcv_skb+0x153/0x420 [ 2551.548756][T26637] ? genl_get_cmd+0x480/0x480 [ 2551.553459][T26637] ? netlink_ack+0xa60/0xa60 [ 2551.558077][T26637] ? netlink_deliver_tap+0x1b1/0xc30 [ 2551.563380][T26637] ? _copy_from_iter+0x12b/0x1320 [ 2551.568434][T26637] genl_rcv+0x24/0x40 [ 2551.572429][T26637] netlink_unicast+0x533/0x7d0 [ 2551.577220][T26637] ? netlink_attachskb+0x880/0x880 [ 2551.582352][T26637] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2551.588617][T26637] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2551.594877][T26637] ? __phys_addr_symbol+0x2c/0x70 [ 2551.599918][T26637] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2551.605661][T26637] ? __check_object_size+0x16e/0x3f0 [ 2551.610972][T26637] netlink_sendmsg+0x86d/0xda0 [ 2551.615766][T26637] ? netlink_unicast+0x7d0/0x7d0 [ 2551.620734][T26637] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2551.626999][T26637] ? netlink_unicast+0x7d0/0x7d0 [ 2551.631968][T26637] sock_sendmsg+0xcf/0x120 [ 2551.636408][T26637] ____sys_sendmsg+0x6e8/0x810 [ 2551.641198][T26637] ? kernel_sendmsg+0x50/0x50 [ 2551.645903][T26637] ? do_recvmmsg+0x6d0/0x6d0 [ 2551.650519][T26637] ? perf_trace_lock+0xeb/0x4d0 [ 2551.655386][T26637] ? lock_chain_count+0x20/0x20 [ 2551.660271][T26637] ? check_path.constprop.0+0x50/0x50 [ 2551.665671][T26637] ___sys_sendmsg+0xf3/0x170 [ 2551.670283][T26637] ? sendmsg_copy_msghdr+0x160/0x160 [ 2551.675592][T26637] ? __fget_files+0x21b/0x3e0 [ 2551.680294][T26637] ? lock_downgrade+0x6e0/0x6e0 [ 2551.685182][T26637] ? __fget_files+0x23d/0x3e0 [ 2551.689891][T26637] ? __fget_light+0xea/0x280 [ 2551.694506][T26637] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2551.700784][T26637] __sys_sendmsg+0xe5/0x1b0 [ 2551.705306][T26637] ? __sys_sendmsg_sock+0x30/0x30 [ 2551.710367][T26637] ? syscall_enter_from_user_mode+0x21/0x70 [ 2551.716290][T26637] do_syscall_64+0x35/0xb0 [ 2551.720727][T26637] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2551.726645][T26637] RIP: 0033:0x7f2d0d66eae9 [ 2551.731072][T26637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2551.750698][T26637] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2551.759137][T26637] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2551.767122][T26637] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 19:23:03 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2000}, 0x0) 19:23:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84ec}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2551.775105][T26637] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2551.783099][T26637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2551.791088][T26637] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2551.799097][T26637] [ 2551.816791][T26628] device 1194 entered promiscuous mode 19:23:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3100, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 15) 19:23:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3200, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2552.015069][T26662] FAULT_INJECTION: forcing a failure. [ 2552.015069][T26662] name failslab, interval 1, probability 0, space 0, times 0 [ 2552.028026][T26662] CPU: 0 PID: 26662 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2552.036460][T26662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2552.046526][T26662] Call Trace: [ 2552.049817][T26662] [ 2552.052757][T26662] dump_stack_lvl+0xcd/0x134 [ 2552.057371][T26662] should_fail.cold+0x5/0xa [ 2552.061905][T26662] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2552.067821][T26662] should_failslab+0x5/0x10 [ 2552.072344][T26662] kmem_cache_alloc_trace+0x55/0x2b0 [ 2552.077651][T26662] ? crypto_aead_setkey+0x10f/0x290 [ 2552.082872][T26662] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2552.088636][T26662] tipc_crypto_key_init+0x82/0x110 [ 2552.093790][T26662] ? tipc_ehdr_validate+0x240/0x240 [ 2552.099008][T26662] ? crypto_mod_put+0x8c/0x100 [ 2552.103806][T26662] tipc_nl_node_set_key+0xa5d/0xf70 [ 2552.109033][T26662] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2552.115303][T26662] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2552.121566][T26662] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2552.128961][T26662] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2552.136286][T26662] genl_family_rcv_msg_doit+0x228/0x320 [ 2552.141858][T26662] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2552.149259][T26662] ? mutex_lock_io_nested+0x1150/0x1150 [ 2552.154844][T26662] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2552.161110][T26662] ? __radix_tree_lookup+0x211/0x2a0 [ 2552.166419][T26662] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2552.172859][T26662] ? genl_get_cmd+0x3cf/0x480 [ 2552.177566][T26662] genl_rcv_msg+0x328/0x580 [ 2552.182098][T26662] ? genl_get_cmd+0x480/0x480 [ 2552.186794][T26662] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2552.193067][T26662] ? lock_release+0x720/0x720 [ 2552.197763][T26662] ? check_path.constprop.0+0x50/0x50 [ 2552.203159][T26662] netlink_rcv_skb+0x153/0x420 [ 2552.207946][T26662] ? genl_get_cmd+0x480/0x480 [ 2552.212650][T26662] ? netlink_ack+0xa60/0xa60 [ 2552.217277][T26662] ? netlink_deliver_tap+0x1b1/0xc30 [ 2552.222584][T26662] ? _copy_from_iter+0x12b/0x1320 [ 2552.227641][T26662] genl_rcv+0x24/0x40 [ 2552.231643][T26662] netlink_unicast+0x533/0x7d0 [ 2552.236435][T26662] ? netlink_attachskb+0x880/0x880 [ 2552.241565][T26662] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2552.247834][T26662] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2552.254096][T26662] ? __phys_addr_symbol+0x2c/0x70 [ 2552.259139][T26662] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2552.264880][T26662] ? __check_object_size+0x16e/0x3f0 [ 2552.270190][T26662] netlink_sendmsg+0x86d/0xda0 [ 2552.274986][T26662] ? netlink_unicast+0x7d0/0x7d0 [ 2552.279947][T26662] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2552.286219][T26662] ? netlink_unicast+0x7d0/0x7d0 [ 2552.291185][T26662] sock_sendmsg+0xcf/0x120 [ 2552.295626][T26662] ____sys_sendmsg+0x6e8/0x810 [ 2552.300419][T26662] ? kernel_sendmsg+0x50/0x50 [ 2552.305121][T26662] ? do_recvmmsg+0x6d0/0x6d0 [ 2552.309752][T26662] ? perf_trace_lock+0xeb/0x4d0 [ 2552.314617][T26662] ? lock_chain_count+0x20/0x20 [ 2552.319492][T26662] ? check_path.constprop.0+0x50/0x50 [ 2552.324891][T26662] ___sys_sendmsg+0xf3/0x170 [ 2552.329500][T26662] ? sendmsg_copy_msghdr+0x160/0x160 [ 2552.334825][T26662] ? __fget_files+0x21b/0x3e0 [ 2552.339523][T26662] ? lock_downgrade+0x6e0/0x6e0 [ 2552.344411][T26662] ? __fget_files+0x23d/0x3e0 [ 2552.349117][T26662] ? __fget_light+0xea/0x280 [ 2552.353726][T26662] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2552.359994][T26662] __sys_sendmsg+0xe5/0x1b0 [ 2552.364513][T26662] ? __sys_sendmsg_sock+0x30/0x30 [ 2552.369575][T26662] ? syscall_enter_from_user_mode+0x21/0x70 [ 2552.375493][T26662] do_syscall_64+0x35/0xb0 [ 2552.380024][T26662] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2552.385939][T26662] RIP: 0033:0x7f2d0d66eae9 [ 2552.390367][T26662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:23:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298ef) 19:23:03 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2100}, 0x0) 19:23:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84ed}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2552.409990][T26662] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2552.418420][T26662] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2552.426406][T26662] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2552.434390][T26662] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2552.442376][T26662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2552.450360][T26662] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2552.458366][T26662] 19:23:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3300, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 16) 19:23:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3400, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2552.632532][T26683] FAULT_INJECTION: forcing a failure. [ 2552.632532][T26683] name failslab, interval 1, probability 0, space 0, times 0 [ 2552.645302][T26683] CPU: 0 PID: 26683 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2552.653737][T26683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2552.663806][T26683] Call Trace: [ 2552.667091][T26683] [ 2552.670032][T26683] dump_stack_lvl+0xcd/0x134 [ 2552.674646][T26683] should_fail.cold+0x5/0xa [ 2552.679181][T26683] ? crypto_create_tfm_node+0x7f/0x320 [ 2552.684662][T26683] should_failslab+0x5/0x10 [ 2552.689189][T26683] __kmalloc_node+0x75/0x370 [ 2552.693813][T26683] crypto_create_tfm_node+0x7f/0x320 [ 2552.699124][T26683] crypto_alloc_tfm_node+0x107/0x260 [ 2552.704438][T26683] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2552.710192][T26683] tipc_crypto_key_init+0x82/0x110 [ 2552.715324][T26683] ? tipc_ehdr_validate+0x240/0x240 [ 2552.720545][T26683] ? crypto_mod_put+0x8c/0x100 [ 2552.725336][T26683] tipc_nl_node_set_key+0xa5d/0xf70 [ 2552.730556][T26683] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2552.736811][T26683] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2552.743060][T26683] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2552.750447][T26683] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2552.757747][T26683] genl_family_rcv_msg_doit+0x228/0x320 [ 2552.763305][T26683] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2552.770685][T26683] ? mutex_lock_io_nested+0x1150/0x1150 [ 2552.776261][T26683] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2552.782505][T26683] ? __radix_tree_lookup+0x211/0x2a0 [ 2552.787790][T26683] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2552.794037][T26683] ? genl_get_cmd+0x3cf/0x480 [ 2552.798736][T26683] genl_rcv_msg+0x328/0x580 [ 2552.803266][T26683] ? genl_get_cmd+0x480/0x480 [ 2552.807966][T26683] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2552.814224][T26683] ? lock_release+0x720/0x720 [ 2552.818904][T26683] ? check_path.constprop.0+0x50/0x50 [ 2552.824280][T26683] netlink_rcv_skb+0x153/0x420 [ 2552.829049][T26683] ? genl_get_cmd+0x480/0x480 [ 2552.833734][T26683] ? netlink_ack+0xa60/0xa60 [ 2552.838337][T26683] ? netlink_deliver_tap+0x1b1/0xc30 [ 2552.843624][T26683] ? _copy_from_iter+0x12b/0x1320 [ 2552.848656][T26683] genl_rcv+0x24/0x40 [ 2552.852641][T26683] netlink_unicast+0x533/0x7d0 [ 2552.857408][T26683] ? netlink_attachskb+0x880/0x880 [ 2552.862525][T26683] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2552.868767][T26683] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2552.875010][T26683] ? __phys_addr_symbol+0x2c/0x70 [ 2552.880035][T26683] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2552.885756][T26683] ? __check_object_size+0x16e/0x3f0 [ 2552.891041][T26683] netlink_sendmsg+0x86d/0xda0 [ 2552.895812][T26683] ? netlink_unicast+0x7d0/0x7d0 [ 2552.900757][T26683] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2552.907000][T26683] ? netlink_unicast+0x7d0/0x7d0 [ 2552.911938][T26683] sock_sendmsg+0xcf/0x120 [ 2552.916356][T26683] ____sys_sendmsg+0x6e8/0x810 [ 2552.921123][T26683] ? kernel_sendmsg+0x50/0x50 [ 2552.925799][T26683] ? do_recvmmsg+0x6d0/0x6d0 [ 2552.930387][T26683] ? perf_trace_lock+0xeb/0x4d0 [ 2552.935234][T26683] ? lock_chain_count+0x20/0x20 [ 2552.940086][T26683] ? check_path.constprop.0+0x50/0x50 [ 2552.945463][T26683] ___sys_sendmsg+0xf3/0x170 [ 2552.950053][T26683] ? sendmsg_copy_msghdr+0x160/0x160 [ 2552.955340][T26683] ? __fget_files+0x21b/0x3e0 [ 2552.960015][T26683] ? lock_downgrade+0x6e0/0x6e0 [ 2552.964886][T26683] ? __fget_files+0x23d/0x3e0 [ 2552.969567][T26683] ? __fget_light+0xea/0x280 [ 2552.974156][T26683] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2552.980403][T26683] __sys_sendmsg+0xe5/0x1b0 [ 2552.984901][T26683] ? __sys_sendmsg_sock+0x30/0x30 [ 2552.989933][T26683] ? syscall_enter_from_user_mode+0x21/0x70 [ 2552.995827][T26683] do_syscall_64+0x35/0xb0 [ 2553.000244][T26683] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2553.006137][T26683] RIP: 0033:0x7f2d0d66eae9 [ 2553.010549][T26683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2553.030164][T26683] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2553.038571][T26683] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2553.046534][T26683] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2553.054498][T26683] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2553.062461][T26683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2553.070427][T26683] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2553.078410][T26683] 19:23:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84ee}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3500, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298f0) 19:23:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 17) 19:23:04 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2200}, 0x0) 19:23:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3600, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2553.281335][T26694] FAULT_INJECTION: forcing a failure. [ 2553.281335][T26694] name failslab, interval 1, probability 0, space 0, times 0 [ 2553.294350][T26694] CPU: 0 PID: 26694 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2553.302789][T26694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2553.312856][T26694] Call Trace: [ 2553.316151][T26694] [ 2553.319097][T26694] dump_stack_lvl+0xcd/0x134 [ 2553.323722][T26694] should_fail.cold+0x5/0xa [ 2553.328263][T26694] ? crypto_create_tfm_node+0x7f/0x320 [ 2553.333750][T26694] should_failslab+0x5/0x10 [ 2553.338283][T26694] __kmalloc_node+0x75/0x370 [ 2553.342906][T26694] crypto_create_tfm_node+0x7f/0x320 [ 2553.348217][T26694] crypto_alloc_tfm_node+0x107/0x260 [ 2553.353533][T26694] cryptd_alloc_aead+0x101/0x200 [ 2553.358496][T26694] ? cryptd_alloc_ahash+0x200/0x200 [ 2553.363732][T26694] ? __kmalloc_node+0x62/0x370 [ 2553.368541][T26694] simd_aead_init+0x67/0x1b0 [ 2553.373155][T26694] ? simd_aead_exit+0x40/0x40 [ 2553.377860][T26694] crypto_aead_init_tfm+0x138/0x1a0 [ 2553.383099][T26694] crypto_create_tfm_node+0x10d/0x320 [ 2553.388498][T26694] crypto_alloc_tfm_node+0x107/0x260 [ 2553.390700][T26698] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2553.393812][T26694] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2553.393866][T26694] tipc_crypto_key_init+0x82/0x110 [ 2553.412723][T26694] ? tipc_ehdr_validate+0x240/0x240 [ 2553.417943][T26694] ? crypto_mod_put+0x8c/0x100 [ 2553.422739][T26694] tipc_nl_node_set_key+0xa5d/0xf70 [ 2553.427968][T26694] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2553.434249][T26694] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2553.440514][T26694] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2553.447913][T26694] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2553.455233][T26694] genl_family_rcv_msg_doit+0x228/0x320 [ 2553.460803][T26694] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2553.468199][T26694] ? mutex_lock_io_nested+0x1150/0x1150 [ 2553.473781][T26694] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2553.480051][T26694] ? __radix_tree_lookup+0x211/0x2a0 [ 2553.485359][T26694] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2553.491625][T26694] ? genl_get_cmd+0x3cf/0x480 [ 2553.496338][T26694] genl_rcv_msg+0x328/0x580 [ 2553.500874][T26694] ? genl_get_cmd+0x480/0x480 [ 2553.505574][T26694] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2553.511849][T26694] ? lock_release+0x720/0x720 [ 2553.516549][T26694] ? check_path.constprop.0+0x50/0x50 [ 2553.522034][T26694] netlink_rcv_skb+0x153/0x420 [ 2553.526823][T26694] ? genl_get_cmd+0x480/0x480 [ 2553.531528][T26694] ? netlink_ack+0xa60/0xa60 [ 2553.536154][T26694] ? netlink_deliver_tap+0x1b1/0xc30 [ 2553.541456][T26694] ? _copy_from_iter+0x12b/0x1320 [ 2553.546511][T26694] genl_rcv+0x24/0x40 [ 2553.550517][T26694] netlink_unicast+0x533/0x7d0 [ 2553.555314][T26694] ? netlink_attachskb+0x880/0x880 [ 2553.560631][T26694] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2553.566899][T26694] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2553.573160][T26694] ? __phys_addr_symbol+0x2c/0x70 [ 2553.578202][T26694] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2553.583939][T26694] ? __check_object_size+0x16e/0x3f0 [ 2553.589252][T26694] netlink_sendmsg+0x86d/0xda0 [ 2553.594048][T26694] ? netlink_unicast+0x7d0/0x7d0 [ 2553.599017][T26694] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2553.605285][T26694] ? netlink_unicast+0x7d0/0x7d0 [ 2553.610256][T26694] sock_sendmsg+0xcf/0x120 [ 2553.614699][T26694] ____sys_sendmsg+0x6e8/0x810 [ 2553.619491][T26694] ? kernel_sendmsg+0x50/0x50 [ 2553.624191][T26694] ? do_recvmmsg+0x6d0/0x6d0 [ 2553.628807][T26694] ? perf_trace_lock+0xeb/0x4d0 [ 2553.633737][T26694] ? lock_chain_count+0x20/0x20 [ 2553.638619][T26694] ? check_path.constprop.0+0x50/0x50 [ 2553.644022][T26694] ___sys_sendmsg+0xf3/0x170 [ 2553.648736][T26694] ? sendmsg_copy_msghdr+0x160/0x160 [ 2553.654048][T26694] ? __fget_files+0x21b/0x3e0 [ 2553.658829][T26694] ? lock_downgrade+0x6e0/0x6e0 [ 2553.663736][T26694] ? __fget_files+0x23d/0x3e0 [ 2553.668447][T26694] ? __fget_light+0xea/0x280 [ 2553.673065][T26694] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2553.679338][T26694] __sys_sendmsg+0xe5/0x1b0 [ 2553.683859][T26694] ? __sys_sendmsg_sock+0x30/0x30 [ 2553.688943][T26694] ? syscall_enter_from_user_mode+0x21/0x70 [ 2553.694867][T26694] do_syscall_64+0x35/0xb0 [ 2553.699305][T26694] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2553.705218][T26694] RIP: 0033:0x7f2d0d66eae9 [ 2553.709653][T26694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:23:05 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2300}, 0x0) [ 2553.729281][T26694] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2553.737725][T26694] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2553.745717][T26694] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2553.753701][T26694] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2553.761716][T26694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2553.769702][T26694] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2553.777835][T26694] 19:23:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3700, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2553.806615][T26698] device 1195 entered promiscuous mode 19:23:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 18) 19:23:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3800, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2553.951777][T26719] FAULT_INJECTION: forcing a failure. [ 2553.951777][T26719] name failslab, interval 1, probability 0, space 0, times 0 [ 2553.964742][T26719] CPU: 0 PID: 26719 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2553.973177][T26719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2553.983248][T26719] Call Trace: [ 2553.986533][T26719] [ 2553.989477][T26719] dump_stack_lvl+0xcd/0x134 [ 2553.994081][T26719] should_fail.cold+0x5/0xa [ 2553.998626][T26719] ? crypto_create_tfm_node+0x7f/0x320 [ 2554.004106][T26719] should_failslab+0x5/0x10 [ 2554.008639][T26719] __kmalloc_node+0x75/0x370 [ 2554.013262][T26719] crypto_create_tfm_node+0x7f/0x320 [ 2554.018572][T26719] crypto_spawn_tfm2+0x60/0xb0 [ 2554.023352][T26719] ? cryptd_hash_init_tfm+0x120/0x120 [ 2554.028751][T26719] cryptd_aead_init_tfm+0x3c/0x140 [ 2554.033884][T26719] ? cryptd_hash_init_tfm+0x120/0x120 [ 2554.039280][T26719] crypto_aead_init_tfm+0x138/0x1a0 [ 2554.044502][T26719] crypto_create_tfm_node+0x10d/0x320 [ 2554.049897][T26719] crypto_alloc_tfm_node+0x107/0x260 [ 2554.055212][T26719] cryptd_alloc_aead+0x101/0x200 [ 2554.060172][T26719] ? cryptd_alloc_ahash+0x200/0x200 [ 2554.065394][T26719] ? __kmalloc_node+0x62/0x370 [ 2554.070292][T26719] simd_aead_init+0x67/0x1b0 [ 2554.074901][T26719] ? simd_aead_exit+0x40/0x40 [ 2554.079601][T26719] crypto_aead_init_tfm+0x138/0x1a0 [ 2554.084843][T26719] crypto_create_tfm_node+0x10d/0x320 [ 2554.090242][T26719] crypto_alloc_tfm_node+0x107/0x260 [ 2554.095559][T26719] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2554.101319][T26719] tipc_crypto_key_init+0x82/0x110 [ 2554.106456][T26719] ? tipc_ehdr_validate+0x240/0x240 [ 2554.111668][T26719] ? crypto_mod_put+0x8c/0x100 [ 2554.116459][T26719] tipc_nl_node_set_key+0xa5d/0xf70 [ 2554.121697][T26719] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2554.127966][T26719] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2554.134225][T26719] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2554.141620][T26719] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2554.148938][T26719] genl_family_rcv_msg_doit+0x228/0x320 [ 2554.154512][T26719] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2554.161905][T26719] ? mutex_lock_io_nested+0x1150/0x1150 [ 2554.167488][T26719] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2554.173756][T26719] ? __radix_tree_lookup+0x211/0x2a0 [ 2554.179063][T26719] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2554.185334][T26719] ? genl_get_cmd+0x3cf/0x480 [ 2554.190042][T26719] genl_rcv_msg+0x328/0x580 [ 2554.194574][T26719] ? genl_get_cmd+0x480/0x480 [ 2554.199270][T26719] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2554.205537][T26719] ? lock_release+0x720/0x720 [ 2554.210238][T26719] ? check_path.constprop.0+0x50/0x50 [ 2554.215636][T26719] netlink_rcv_skb+0x153/0x420 [ 2554.220422][T26719] ? genl_get_cmd+0x480/0x480 [ 2554.225129][T26719] ? netlink_ack+0xa60/0xa60 [ 2554.229752][T26719] ? netlink_deliver_tap+0x1b1/0xc30 [ 2554.235056][T26719] ? _copy_from_iter+0x12b/0x1320 [ 2554.240119][T26719] genl_rcv+0x24/0x40 [ 2554.244125][T26719] netlink_unicast+0x533/0x7d0 [ 2554.248918][T26719] ? netlink_attachskb+0x880/0x880 [ 2554.254048][T26719] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2554.260321][T26719] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2554.266587][T26719] ? __phys_addr_symbol+0x2c/0x70 [ 2554.271631][T26719] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2554.277372][T26719] ? __check_object_size+0x16e/0x3f0 [ 2554.282679][T26719] netlink_sendmsg+0x86d/0xda0 [ 2554.287466][T26719] ? netlink_unicast+0x7d0/0x7d0 [ 2554.292432][T26719] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2554.298696][T26719] ? netlink_unicast+0x7d0/0x7d0 [ 2554.303652][T26719] sock_sendmsg+0xcf/0x120 [ 2554.308097][T26719] ____sys_sendmsg+0x6e8/0x810 [ 2554.312974][T26719] ? kernel_sendmsg+0x50/0x50 [ 2554.317669][T26719] ? do_recvmmsg+0x6d0/0x6d0 [ 2554.322277][T26719] ? perf_trace_lock+0xeb/0x4d0 [ 2554.327145][T26719] ? lock_chain_count+0x20/0x20 [ 2554.332018][T26719] ? check_path.constprop.0+0x50/0x50 [ 2554.337412][T26719] ___sys_sendmsg+0xf3/0x170 [ 2554.342028][T26719] ? sendmsg_copy_msghdr+0x160/0x160 [ 2554.347342][T26719] ? __fget_files+0x21b/0x3e0 [ 2554.352039][T26719] ? lock_downgrade+0x6e0/0x6e0 [ 2554.356929][T26719] ? __fget_files+0x23d/0x3e0 [ 2554.361636][T26719] ? __fget_light+0xea/0x280 [ 2554.366250][T26719] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2554.372516][T26719] __sys_sendmsg+0xe5/0x1b0 [ 2554.377038][T26719] ? __sys_sendmsg_sock+0x30/0x30 [ 2554.382106][T26719] ? syscall_enter_from_user_mode+0x21/0x70 [ 2554.388028][T26719] do_syscall_64+0x35/0xb0 [ 2554.392467][T26719] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2554.398391][T26719] RIP: 0033:0x7f2d0d66eae9 [ 2554.402816][T26719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2554.422444][T26719] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2554.430872][T26719] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2554.438855][T26719] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 19:23:05 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2400}, 0x0) 19:23:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84ef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298f1) 19:23:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2554.446835][T26719] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2554.454815][T26719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2554.462795][T26719] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2554.470804][T26719] 19:23:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3900, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 19) 19:23:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3a00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2554.651642][T26740] FAULT_INJECTION: forcing a failure. [ 2554.651642][T26740] name failslab, interval 1, probability 0, space 0, times 0 [ 2554.664617][T26740] CPU: 0 PID: 26740 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2554.673057][T26740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2554.683132][T26740] Call Trace: [ 2554.686432][T26740] [ 2554.689372][T26740] dump_stack_lvl+0xcd/0x134 [ 2554.693983][T26740] should_fail.cold+0x5/0xa [ 2554.698513][T26740] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2554.704433][T26740] should_failslab+0x5/0x10 [ 2554.708958][T26740] kmem_cache_alloc_trace+0x55/0x2b0 [ 2554.714262][T26740] ? crypto_aead_setkey+0x10f/0x290 [ 2554.719488][T26740] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2554.725250][T26740] tipc_crypto_key_init+0x82/0x110 [ 2554.730389][T26740] ? tipc_ehdr_validate+0x240/0x240 [ 2554.735604][T26740] ? crypto_mod_put+0x8c/0x100 [ 2554.740396][T26740] tipc_nl_node_set_key+0xa5d/0xf70 [ 2554.745624][T26740] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2554.751898][T26740] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2554.758161][T26740] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2554.765563][T26740] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2554.772888][T26740] genl_family_rcv_msg_doit+0x228/0x320 [ 2554.778464][T26740] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2554.785861][T26740] ? mutex_lock_io_nested+0x1150/0x1150 [ 2554.791456][T26740] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2554.797722][T26740] ? __radix_tree_lookup+0x211/0x2a0 [ 2554.803030][T26740] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2554.809299][T26740] ? genl_get_cmd+0x3cf/0x480 [ 2554.814004][T26740] genl_rcv_msg+0x328/0x580 [ 2554.818644][T26740] ? genl_get_cmd+0x480/0x480 [ 2554.823347][T26740] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2554.829615][T26740] ? lock_release+0x720/0x720 [ 2554.834313][T26740] ? check_path.constprop.0+0x50/0x50 [ 2554.839718][T26740] netlink_rcv_skb+0x153/0x420 [ 2554.844508][T26740] ? genl_get_cmd+0x480/0x480 [ 2554.849211][T26740] ? netlink_ack+0xa60/0xa60 [ 2554.853825][T26740] ? netlink_deliver_tap+0x1b1/0xc30 [ 2554.859128][T26740] ? _copy_from_iter+0x12b/0x1320 [ 2554.864184][T26740] genl_rcv+0x24/0x40 [ 2554.868205][T26740] netlink_unicast+0x533/0x7d0 [ 2554.872999][T26740] ? netlink_attachskb+0x880/0x880 [ 2554.878135][T26740] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2554.884405][T26740] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2554.890670][T26740] ? __phys_addr_symbol+0x2c/0x70 [ 2554.895714][T26740] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2554.901454][T26740] ? __check_object_size+0x16e/0x3f0 [ 2554.906764][T26740] netlink_sendmsg+0x86d/0xda0 [ 2554.911564][T26740] ? netlink_unicast+0x7d0/0x7d0 [ 2554.916536][T26740] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2554.922806][T26740] ? netlink_unicast+0x7d0/0x7d0 [ 2554.927766][T26740] sock_sendmsg+0xcf/0x120 [ 2554.932206][T26740] ____sys_sendmsg+0x6e8/0x810 [ 2554.937005][T26740] ? kernel_sendmsg+0x50/0x50 [ 2554.941706][T26740] ? do_recvmmsg+0x6d0/0x6d0 [ 2554.946314][T26740] ? perf_trace_lock+0xeb/0x4d0 [ 2554.951181][T26740] ? lock_chain_count+0x20/0x20 [ 2554.956059][T26740] ? check_path.constprop.0+0x50/0x50 [ 2554.961462][T26740] ___sys_sendmsg+0xf3/0x170 [ 2554.966074][T26740] ? sendmsg_copy_msghdr+0x160/0x160 [ 2554.971383][T26740] ? __fget_files+0x21b/0x3e0 [ 2554.976083][T26740] ? lock_downgrade+0x6e0/0x6e0 [ 2554.980969][T26740] ? __fget_files+0x23d/0x3e0 [ 2554.985678][T26740] ? __fget_light+0xea/0x280 [ 2554.990291][T26740] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2554.996589][T26740] __sys_sendmsg+0xe5/0x1b0 [ 2555.001111][T26740] ? __sys_sendmsg_sock+0x30/0x30 [ 2555.006169][T26740] ? syscall_enter_from_user_mode+0x21/0x70 [ 2555.012084][T26740] do_syscall_64+0x35/0xb0 [ 2555.016525][T26740] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2555.022441][T26740] RIP: 0033:0x7f2d0d66eae9 [ 2555.026872][T26740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:23:06 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2500}, 0x0) 19:23:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298f2) 19:23:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84f0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2555.046581][T26740] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2555.055003][T26740] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2555.062992][T26740] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2555.070980][T26740] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2555.078967][T26740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2555.086948][T26740] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2555.094954][T26740] 19:23:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3b00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 20) 19:23:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3c00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2555.235978][T26759] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2555.253588][T26759] device 1196 entered promiscuous mode [ 2555.313104][T26762] FAULT_INJECTION: forcing a failure. [ 2555.313104][T26762] name failslab, interval 1, probability 0, space 0, times 0 [ 2555.326175][T26762] CPU: 0 PID: 26762 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2555.334622][T26762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2555.344695][T26762] Call Trace: [ 2555.347983][T26762] [ 2555.350926][T26762] dump_stack_lvl+0xcd/0x134 [ 2555.355576][T26762] should_fail.cold+0x5/0xa [ 2555.360108][T26762] ? crypto_create_tfm_node+0x7f/0x320 [ 2555.365589][T26762] should_failslab+0x5/0x10 [ 2555.370112][T26762] __kmalloc_node+0x75/0x370 [ 2555.374730][T26762] crypto_create_tfm_node+0x7f/0x320 [ 2555.380046][T26762] crypto_alloc_tfm_node+0x107/0x260 [ 2555.385361][T26762] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2555.391115][T26762] tipc_crypto_key_init+0x82/0x110 [ 2555.396233][T26762] ? tipc_ehdr_validate+0x240/0x240 [ 2555.401427][T26762] ? crypto_mod_put+0x8c/0x100 [ 2555.406216][T26762] tipc_nl_node_set_key+0xa5d/0xf70 [ 2555.411431][T26762] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2555.417681][T26762] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2555.423923][T26762] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2555.431301][T26762] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2555.438615][T26762] genl_family_rcv_msg_doit+0x228/0x320 [ 2555.444281][T26762] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2555.451664][T26762] ? mutex_lock_io_nested+0x1150/0x1150 [ 2555.457233][T26762] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2555.463491][T26762] ? __radix_tree_lookup+0x211/0x2a0 [ 2555.468779][T26762] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2555.475027][T26762] ? genl_get_cmd+0x3cf/0x480 [ 2555.479718][T26762] genl_rcv_msg+0x328/0x580 [ 2555.484234][T26762] ? genl_get_cmd+0x480/0x480 [ 2555.488916][T26762] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2555.495192][T26762] ? lock_release+0x720/0x720 [ 2555.499885][T26762] ? check_path.constprop.0+0x50/0x50 [ 2555.505265][T26762] netlink_rcv_skb+0x153/0x420 [ 2555.510034][T26762] ? genl_get_cmd+0x480/0x480 [ 2555.514724][T26762] ? netlink_ack+0xa60/0xa60 [ 2555.519323][T26762] ? netlink_deliver_tap+0x1b1/0xc30 [ 2555.524608][T26762] ? _copy_from_iter+0x12b/0x1320 [ 2555.529643][T26762] genl_rcv+0x24/0x40 [ 2555.533640][T26762] netlink_unicast+0x533/0x7d0 [ 2555.538448][T26762] ? netlink_attachskb+0x880/0x880 [ 2555.543563][T26762] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2555.549809][T26762] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2555.556056][T26762] ? __phys_addr_symbol+0x2c/0x70 [ 2555.561270][T26762] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2555.566997][T26762] ? __check_object_size+0x16e/0x3f0 [ 2555.572474][T26762] netlink_sendmsg+0x86d/0xda0 [ 2555.577253][T26762] ? netlink_unicast+0x7d0/0x7d0 [ 2555.582197][T26762] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2555.588441][T26762] ? netlink_unicast+0x7d0/0x7d0 [ 2555.593383][T26762] sock_sendmsg+0xcf/0x120 [ 2555.597811][T26762] ____sys_sendmsg+0x6e8/0x810 [ 2555.602593][T26762] ? kernel_sendmsg+0x50/0x50 [ 2555.607269][T26762] ? do_recvmmsg+0x6d0/0x6d0 [ 2555.611859][T26762] ? perf_trace_lock+0xeb/0x4d0 [ 2555.616708][T26762] ? lock_chain_count+0x20/0x20 [ 2555.621590][T26762] ? check_path.constprop.0+0x50/0x50 [ 2555.627010][T26762] ___sys_sendmsg+0xf3/0x170 [ 2555.631621][T26762] ? sendmsg_copy_msghdr+0x160/0x160 [ 2555.636915][T26762] ? __fget_files+0x21b/0x3e0 [ 2555.641593][T26762] ? lock_downgrade+0x6e0/0x6e0 [ 2555.646458][T26762] ? __fget_files+0x23d/0x3e0 [ 2555.651142][T26762] ? __fget_light+0xea/0x280 [ 2555.655732][T26762] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2555.661979][T26762] __sys_sendmsg+0xe5/0x1b0 [ 2555.666499][T26762] ? __sys_sendmsg_sock+0x30/0x30 [ 2555.671555][T26762] ? syscall_enter_from_user_mode+0x21/0x70 [ 2555.677461][T26762] do_syscall_64+0x35/0xb0 [ 2555.681916][T26762] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2555.687821][T26762] RIP: 0033:0x7f2d0d66eae9 [ 2555.692236][T26762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2555.711845][T26762] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2555.720263][T26762] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2555.728231][T26762] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2555.736197][T26762] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2555.744160][T26762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2555.752134][T26762] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2555.760118][T26762] 19:23:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3d00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84f1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:07 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2600}, 0x0) 19:23:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3e00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 21) 19:23:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x3f00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2556.036815][T26783] FAULT_INJECTION: forcing a failure. [ 2556.036815][T26783] name failslab, interval 1, probability 0, space 0, times 0 [ 2556.049579][T26783] CPU: 0 PID: 26783 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2556.058012][T26783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2556.068080][T26783] Call Trace: [ 2556.071369][T26783] [ 2556.074312][T26783] dump_stack_lvl+0xcd/0x134 [ 2556.078946][T26783] should_fail.cold+0x5/0xa [ 2556.083482][T26783] ? crypto_create_tfm_node+0x7f/0x320 [ 2556.088972][T26783] should_failslab+0x5/0x10 [ 2556.093504][T26783] __kmalloc_node+0x75/0x370 [ 2556.098130][T26783] crypto_create_tfm_node+0x7f/0x320 [ 2556.103441][T26783] crypto_alloc_tfm_node+0x107/0x260 [ 2556.108755][T26783] cryptd_alloc_aead+0x101/0x200 [ 2556.113719][T26783] ? cryptd_alloc_ahash+0x200/0x200 [ 2556.118954][T26783] ? __kmalloc_node+0x62/0x370 [ 2556.123761][T26783] simd_aead_init+0x67/0x1b0 [ 2556.128370][T26783] ? simd_aead_exit+0x40/0x40 [ 2556.133072][T26783] crypto_aead_init_tfm+0x138/0x1a0 [ 2556.138295][T26783] crypto_create_tfm_node+0x10d/0x320 [ 2556.143690][T26783] crypto_alloc_tfm_node+0x107/0x260 [ 2556.149010][T26783] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2556.154770][T26783] tipc_crypto_key_init+0x82/0x110 [ 2556.159902][T26783] ? tipc_ehdr_validate+0x240/0x240 [ 2556.165124][T26783] ? crypto_mod_put+0x8c/0x100 [ 2556.169916][T26783] tipc_nl_node_set_key+0xa5d/0xf70 [ 2556.175149][T26783] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2556.181427][T26783] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2556.187690][T26783] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2556.195094][T26783] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2556.202415][T26783] genl_family_rcv_msg_doit+0x228/0x320 [ 2556.207989][T26783] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2556.215393][T26783] ? mutex_lock_io_nested+0x1150/0x1150 [ 2556.221061][T26783] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2556.227410][T26783] ? __radix_tree_lookup+0x211/0x2a0 [ 2556.232716][T26783] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2556.238979][T26783] ? genl_get_cmd+0x3cf/0x480 [ 2556.243683][T26783] genl_rcv_msg+0x328/0x580 [ 2556.248219][T26783] ? genl_get_cmd+0x480/0x480 [ 2556.252930][T26783] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2556.259206][T26783] ? lock_release+0x720/0x720 [ 2556.263911][T26783] ? check_path.constprop.0+0x50/0x50 [ 2556.269318][T26783] netlink_rcv_skb+0x153/0x420 [ 2556.274104][T26783] ? genl_get_cmd+0x480/0x480 [ 2556.278805][T26783] ? netlink_ack+0xa60/0xa60 [ 2556.283422][T26783] ? netlink_deliver_tap+0x1b1/0xc30 [ 2556.288727][T26783] ? _copy_from_iter+0x12b/0x1320 [ 2556.293779][T26783] genl_rcv+0x24/0x40 [ 2556.297779][T26783] netlink_unicast+0x533/0x7d0 [ 2556.302568][T26783] ? netlink_attachskb+0x880/0x880 [ 2556.307700][T26783] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2556.313966][T26783] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2556.320226][T26783] ? __phys_addr_symbol+0x2c/0x70 [ 2556.325271][T26783] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2556.331013][T26783] ? __check_object_size+0x16e/0x3f0 [ 2556.336322][T26783] netlink_sendmsg+0x86d/0xda0 [ 2556.341117][T26783] ? netlink_unicast+0x7d0/0x7d0 [ 2556.346084][T26783] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2556.352350][T26783] ? netlink_unicast+0x7d0/0x7d0 [ 2556.357312][T26783] sock_sendmsg+0xcf/0x120 [ 2556.361756][T26783] ____sys_sendmsg+0x6e8/0x810 [ 2556.366550][T26783] ? kernel_sendmsg+0x50/0x50 [ 2556.371247][T26783] ? do_recvmmsg+0x6d0/0x6d0 [ 2556.375856][T26783] ? perf_trace_lock+0xeb/0x4d0 [ 2556.380728][T26783] ? lock_chain_count+0x20/0x20 [ 2556.385605][T26783] ? check_path.constprop.0+0x50/0x50 [ 2556.391004][T26783] ___sys_sendmsg+0xf3/0x170 [ 2556.395615][T26783] ? sendmsg_copy_msghdr+0x160/0x160 [ 2556.400928][T26783] ? __fget_files+0x21b/0x3e0 [ 2556.405632][T26783] ? lock_downgrade+0x6e0/0x6e0 [ 2556.410519][T26783] ? __fget_files+0x23d/0x3e0 [ 2556.415229][T26783] ? __fget_light+0xea/0x280 [ 2556.419843][T26783] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2556.426115][T26783] __sys_sendmsg+0xe5/0x1b0 [ 2556.430633][T26783] ? __sys_sendmsg_sock+0x30/0x30 [ 2556.435695][T26783] ? syscall_enter_from_user_mode+0x21/0x70 [ 2556.441615][T26783] do_syscall_64+0x35/0xb0 [ 2556.446054][T26783] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2556.451966][T26783] RIP: 0033:0x7f2d0d66eae9 [ 2556.456396][T26783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2556.476024][T26783] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:23:07 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298f3) 19:23:07 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2700}, 0x0) [ 2556.484536][T26783] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2556.492520][T26783] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2556.500509][T26783] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2556.508492][T26783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2556.516478][T26783] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2556.524484][T26783] 19:23:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4000, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 22) 19:23:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4100, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2556.703213][T26804] FAULT_INJECTION: forcing a failure. [ 2556.703213][T26804] name failslab, interval 1, probability 0, space 0, times 0 [ 2556.716165][T26804] CPU: 0 PID: 26804 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2556.724606][T26804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2556.734674][T26804] Call Trace: [ 2556.737967][T26804] [ 2556.740914][T26804] dump_stack_lvl+0xcd/0x134 [ 2556.745527][T26804] should_fail.cold+0x5/0xa [ 2556.750063][T26804] ? crypto_create_tfm_node+0x7f/0x320 [ 2556.755540][T26804] should_failslab+0x5/0x10 [ 2556.760059][T26804] __kmalloc_node+0x75/0x370 [ 2556.764680][T26804] crypto_create_tfm_node+0x7f/0x320 [ 2556.769997][T26804] crypto_spawn_tfm2+0x60/0xb0 [ 2556.774783][T26804] ? cryptd_hash_init_tfm+0x120/0x120 [ 2556.780182][T26804] cryptd_aead_init_tfm+0x3c/0x140 [ 2556.785313][T26804] ? cryptd_hash_init_tfm+0x120/0x120 [ 2556.790705][T26804] crypto_aead_init_tfm+0x138/0x1a0 [ 2556.795926][T26804] crypto_create_tfm_node+0x10d/0x320 [ 2556.801322][T26804] crypto_alloc_tfm_node+0x107/0x260 [ 2556.806642][T26804] cryptd_alloc_aead+0x101/0x200 [ 2556.811607][T26804] ? cryptd_alloc_ahash+0x200/0x200 [ 2556.816835][T26804] ? __kmalloc_node+0x62/0x370 [ 2556.821642][T26804] simd_aead_init+0x67/0x1b0 [ 2556.826251][T26804] ? simd_aead_exit+0x40/0x40 [ 2556.830945][T26804] crypto_aead_init_tfm+0x138/0x1a0 [ 2556.836423][T26804] crypto_create_tfm_node+0x10d/0x320 [ 2556.841830][T26804] crypto_alloc_tfm_node+0x107/0x260 [ 2556.847153][T26804] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2556.852918][T26804] tipc_crypto_key_init+0x82/0x110 [ 2556.858056][T26804] ? tipc_ehdr_validate+0x240/0x240 [ 2556.863272][T26804] ? crypto_mod_put+0x8c/0x100 [ 2556.868064][T26804] tipc_nl_node_set_key+0xa5d/0xf70 [ 2556.873292][T26804] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2556.879565][T26804] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2556.885831][T26804] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2556.893226][T26804] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2556.900547][T26804] genl_family_rcv_msg_doit+0x228/0x320 [ 2556.906120][T26804] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2556.913515][T26804] ? mutex_lock_io_nested+0x1150/0x1150 [ 2556.919096][T26804] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2556.925360][T26804] ? __radix_tree_lookup+0x211/0x2a0 [ 2556.930684][T26804] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2556.936950][T26804] ? genl_get_cmd+0x3cf/0x480 [ 2556.941659][T26804] genl_rcv_msg+0x328/0x580 [ 2556.946191][T26804] ? genl_get_cmd+0x480/0x480 [ 2556.950900][T26804] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2556.957170][T26804] ? lock_release+0x720/0x720 [ 2556.961863][T26804] ? check_path.constprop.0+0x50/0x50 [ 2556.967270][T26804] netlink_rcv_skb+0x153/0x420 [ 2556.972060][T26804] ? genl_get_cmd+0x480/0x480 [ 2556.976763][T26804] ? netlink_ack+0xa60/0xa60 [ 2556.981382][T26804] ? netlink_deliver_tap+0x1b1/0xc30 [ 2556.986691][T26804] ? _copy_from_iter+0x12b/0x1320 [ 2556.991747][T26804] genl_rcv+0x24/0x40 [ 2556.995746][T26804] netlink_unicast+0x533/0x7d0 [ 2557.000536][T26804] ? netlink_attachskb+0x880/0x880 [ 2557.005760][T26804] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2557.012026][T26804] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2557.018291][T26804] ? __phys_addr_symbol+0x2c/0x70 [ 2557.023339][T26804] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2557.029079][T26804] ? __check_object_size+0x16e/0x3f0 [ 2557.034397][T26804] netlink_sendmsg+0x86d/0xda0 [ 2557.039193][T26804] ? netlink_unicast+0x7d0/0x7d0 [ 2557.044164][T26804] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2557.050441][T26804] ? netlink_unicast+0x7d0/0x7d0 [ 2557.055402][T26804] sock_sendmsg+0xcf/0x120 [ 2557.059847][T26804] ____sys_sendmsg+0x6e8/0x810 [ 2557.064646][T26804] ? kernel_sendmsg+0x50/0x50 [ 2557.069344][T26804] ? do_recvmmsg+0x6d0/0x6d0 [ 2557.073972][T26804] ? perf_trace_lock+0xeb/0x4d0 [ 2557.078842][T26804] ? lock_chain_count+0x20/0x20 [ 2557.083764][T26804] ? check_path.constprop.0+0x50/0x50 [ 2557.089162][T26804] ___sys_sendmsg+0xf3/0x170 [ 2557.093778][T26804] ? sendmsg_copy_msghdr+0x160/0x160 [ 2557.099091][T26804] ? __fget_files+0x21b/0x3e0 [ 2557.103788][T26804] ? lock_downgrade+0x6e0/0x6e0 [ 2557.108674][T26804] ? __fget_files+0x23d/0x3e0 [ 2557.113384][T26804] ? __fget_light+0xea/0x280 [ 2557.118002][T26804] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2557.124274][T26804] __sys_sendmsg+0xe5/0x1b0 [ 2557.128803][T26804] ? __sys_sendmsg_sock+0x30/0x30 [ 2557.133882][T26804] ? syscall_enter_from_user_mode+0x21/0x70 [ 2557.139803][T26804] do_syscall_64+0x35/0xb0 [ 2557.144285][T26804] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2557.150200][T26804] RIP: 0033:0x7f2d0d66eae9 [ 2557.154631][T26804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2557.174259][T26804] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2557.182691][T26804] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2557.190704][T26804] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 19:23:08 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2800}, 0x0) 19:23:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84f2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:08 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298f4) 19:23:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2557.198694][T26804] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2557.206683][T26804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2557.214762][T26804] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2557.222783][T26804] 19:23:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4200, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 23) 19:23:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4300, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2557.391807][T26825] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2557.409844][T26825] device 1197 entered promiscuous mode [ 2557.415937][T26827] FAULT_INJECTION: forcing a failure. [ 2557.415937][T26827] name failslab, interval 1, probability 0, space 0, times 0 [ 2557.428663][T26827] CPU: 0 PID: 26827 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2557.437097][T26827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2557.447170][T26827] Call Trace: [ 2557.450459][T26827] [ 2557.453403][T26827] dump_stack_lvl+0xcd/0x134 [ 2557.458024][T26827] should_fail.cold+0x5/0xa [ 2557.462567][T26827] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2557.468483][T26827] should_failslab+0x5/0x10 [ 2557.473004][T26827] kmem_cache_alloc_trace+0x55/0x2b0 [ 2557.478307][T26827] ? crypto_aead_setkey+0x10f/0x290 [ 2557.483539][T26827] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2557.489303][T26827] tipc_crypto_key_init+0x82/0x110 [ 2557.494458][T26827] ? tipc_ehdr_validate+0x240/0x240 [ 2557.499675][T26827] ? crypto_mod_put+0x8c/0x100 [ 2557.504470][T26827] tipc_nl_node_set_key+0xa5d/0xf70 [ 2557.509697][T26827] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2557.515976][T26827] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2557.522244][T26827] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2557.529642][T26827] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2557.536968][T26827] genl_family_rcv_msg_doit+0x228/0x320 [ 2557.542544][T26827] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2557.549941][T26827] ? mutex_lock_io_nested+0x1150/0x1150 [ 2557.555536][T26827] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2557.561830][T26827] ? __radix_tree_lookup+0x211/0x2a0 [ 2557.567150][T26827] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2557.573415][T26827] ? genl_get_cmd+0x3cf/0x480 [ 2557.578153][T26827] genl_rcv_msg+0x328/0x580 [ 2557.582679][T26827] ? genl_get_cmd+0x480/0x480 [ 2557.587384][T26827] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2557.593655][T26827] ? lock_release+0x720/0x720 [ 2557.598373][T26827] ? check_path.constprop.0+0x50/0x50 [ 2557.603772][T26827] netlink_rcv_skb+0x153/0x420 [ 2557.608559][T26827] ? genl_get_cmd+0x480/0x480 [ 2557.613289][T26827] ? netlink_ack+0xa60/0xa60 [ 2557.617910][T26827] ? netlink_deliver_tap+0x1b1/0xc30 [ 2557.623230][T26827] ? _copy_from_iter+0x12b/0x1320 [ 2557.628286][T26827] genl_rcv+0x24/0x40 [ 2557.632286][T26827] netlink_unicast+0x533/0x7d0 [ 2557.637080][T26827] ? netlink_attachskb+0x880/0x880 [ 2557.642208][T26827] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2557.648485][T26827] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2557.654749][T26827] ? __phys_addr_symbol+0x2c/0x70 [ 2557.659798][T26827] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2557.665544][T26827] ? __check_object_size+0x16e/0x3f0 [ 2557.670858][T26827] netlink_sendmsg+0x86d/0xda0 [ 2557.675660][T26827] ? netlink_unicast+0x7d0/0x7d0 [ 2557.680639][T26827] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2557.686915][T26827] ? netlink_unicast+0x7d0/0x7d0 [ 2557.691882][T26827] sock_sendmsg+0xcf/0x120 [ 2557.696328][T26827] ____sys_sendmsg+0x6e8/0x810 [ 2557.701126][T26827] ? kernel_sendmsg+0x50/0x50 [ 2557.705827][T26827] ? do_recvmmsg+0x6d0/0x6d0 [ 2557.710444][T26827] ? perf_trace_lock+0xeb/0x4d0 [ 2557.715309][T26827] ? lock_chain_count+0x20/0x20 [ 2557.720188][T26827] ? check_path.constprop.0+0x50/0x50 [ 2557.725588][T26827] ___sys_sendmsg+0xf3/0x170 [ 2557.730213][T26827] ? sendmsg_copy_msghdr+0x160/0x160 [ 2557.735527][T26827] ? __fget_files+0x21b/0x3e0 [ 2557.740227][T26827] ? lock_downgrade+0x6e0/0x6e0 [ 2557.745120][T26827] ? __fget_files+0x23d/0x3e0 [ 2557.749832][T26827] ? __fget_light+0xea/0x280 [ 2557.754449][T26827] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2557.760720][T26827] __sys_sendmsg+0xe5/0x1b0 [ 2557.765248][T26827] ? __sys_sendmsg_sock+0x30/0x30 [ 2557.770315][T26827] ? syscall_enter_from_user_mode+0x21/0x70 [ 2557.776236][T26827] do_syscall_64+0x35/0xb0 [ 2557.780668][T26827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2557.786579][T26827] RIP: 0033:0x7f2d0d66eae9 [ 2557.791009][T26827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2557.810635][T26827] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2557.819055][T26827] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2557.827024][T26827] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2557.834991][T26827] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 19:23:09 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298f5) 19:23:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:09 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2900}, 0x0) [ 2557.842956][T26827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2557.850922][T26827] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2557.858924][T26827] 19:23:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4400, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 24) 19:23:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84f3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4500, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2558.026501][T26848] FAULT_INJECTION: forcing a failure. [ 2558.026501][T26848] name failslab, interval 1, probability 0, space 0, times 0 [ 2558.039342][T26848] CPU: 0 PID: 26848 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2558.047784][T26848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2558.057948][T26848] Call Trace: [ 2558.061240][T26848] [ 2558.064181][T26848] dump_stack_lvl+0xcd/0x134 [ 2558.068798][T26848] should_fail.cold+0x5/0xa [ 2558.073338][T26848] ? crypto_create_tfm_node+0x7f/0x320 [ 2558.078821][T26848] should_failslab+0x5/0x10 [ 2558.083347][T26848] __kmalloc_node+0x75/0x370 [ 2558.087968][T26848] crypto_create_tfm_node+0x7f/0x320 [ 2558.093279][T26848] crypto_alloc_tfm_node+0x107/0x260 [ 2558.098606][T26848] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2558.104369][T26848] tipc_crypto_key_init+0x82/0x110 [ 2558.109505][T26848] ? tipc_ehdr_validate+0x240/0x240 [ 2558.114724][T26848] ? crypto_mod_put+0x8c/0x100 [ 2558.119520][T26848] tipc_nl_node_set_key+0xa5d/0xf70 [ 2558.124752][T26848] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2558.131026][T26848] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2558.137297][T26848] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2558.144693][T26848] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2558.152015][T26848] genl_family_rcv_msg_doit+0x228/0x320 [ 2558.157588][T26848] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2558.164987][T26848] ? mutex_lock_io_nested+0x1150/0x1150 [ 2558.170570][T26848] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2558.176835][T26848] ? __radix_tree_lookup+0x211/0x2a0 [ 2558.182144][T26848] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2558.188419][T26848] ? genl_get_cmd+0x3cf/0x480 [ 2558.193132][T26848] genl_rcv_msg+0x328/0x580 [ 2558.197670][T26848] ? genl_get_cmd+0x480/0x480 [ 2558.202370][T26848] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2558.208630][T26848] ? lock_release+0x720/0x720 [ 2558.213330][T26848] ? check_path.constprop.0+0x50/0x50 [ 2558.218731][T26848] netlink_rcv_skb+0x153/0x420 [ 2558.223522][T26848] ? genl_get_cmd+0x480/0x480 [ 2558.228227][T26848] ? netlink_ack+0xa60/0xa60 [ 2558.232853][T26848] ? netlink_deliver_tap+0x1b1/0xc30 [ 2558.238170][T26848] ? _copy_from_iter+0x12b/0x1320 [ 2558.243238][T26848] genl_rcv+0x24/0x40 [ 2558.247249][T26848] netlink_unicast+0x533/0x7d0 [ 2558.252054][T26848] ? netlink_attachskb+0x880/0x880 [ 2558.257184][T26848] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2558.263449][T26848] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2558.269714][T26848] ? __phys_addr_symbol+0x2c/0x70 [ 2558.274761][T26848] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2558.280503][T26848] ? __check_object_size+0x16e/0x3f0 [ 2558.285815][T26848] netlink_sendmsg+0x86d/0xda0 [ 2558.290616][T26848] ? netlink_unicast+0x7d0/0x7d0 [ 2558.295588][T26848] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2558.301873][T26848] ? netlink_unicast+0x7d0/0x7d0 [ 2558.306837][T26848] sock_sendmsg+0xcf/0x120 [ 2558.311292][T26848] ____sys_sendmsg+0x6e8/0x810 [ 2558.316086][T26848] ? kernel_sendmsg+0x50/0x50 [ 2558.320784][T26848] ? do_recvmmsg+0x6d0/0x6d0 [ 2558.325395][T26848] ? perf_trace_lock+0xeb/0x4d0 [ 2558.330271][T26848] ? lock_chain_count+0x20/0x20 [ 2558.335139][T26848] ? check_path.constprop.0+0x50/0x50 [ 2558.340530][T26848] ___sys_sendmsg+0xf3/0x170 [ 2558.345140][T26848] ? sendmsg_copy_msghdr+0x160/0x160 [ 2558.350440][T26848] ? __fget_files+0x21b/0x3e0 [ 2558.355135][T26848] ? lock_downgrade+0x6e0/0x6e0 [ 2558.360004][T26848] ? __fget_files+0x23d/0x3e0 [ 2558.364693][T26848] ? __fget_light+0xea/0x280 [ 2558.369299][T26848] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2558.375565][T26848] __sys_sendmsg+0xe5/0x1b0 [ 2558.380079][T26848] ? __sys_sendmsg_sock+0x30/0x30 [ 2558.385117][T26848] ? syscall_enter_from_user_mode+0x21/0x70 [ 2558.391017][T26848] do_syscall_64+0x35/0xb0 [ 2558.395440][T26848] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2558.401344][T26848] RIP: 0033:0x7f2d0d66eae9 [ 2558.405788][T26848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:23:09 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2a00}, 0x0) 19:23:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:09 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298f6) [ 2558.425400][T26848] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2558.433816][T26848] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2558.441801][T26848] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2558.449768][T26848] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2558.457741][T26848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2558.465714][T26848] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2558.473702][T26848] 19:23:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4600, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 25) 19:23:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4700, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2558.625749][T26860] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2558.643998][T26860] device 1198 entered promiscuous mode [ 2558.658633][T26867] FAULT_INJECTION: forcing a failure. [ 2558.658633][T26867] name failslab, interval 1, probability 0, space 0, times 0 [ 2558.671525][T26867] CPU: 0 PID: 26867 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2558.679965][T26867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2558.690039][T26867] Call Trace: [ 2558.693332][T26867] [ 2558.696276][T26867] dump_stack_lvl+0xcd/0x134 [ 2558.700893][T26867] should_fail.cold+0x5/0xa [ 2558.705434][T26867] ? crypto_create_tfm_node+0x7f/0x320 [ 2558.710916][T26867] should_failslab+0x5/0x10 [ 2558.715442][T26867] __kmalloc_node+0x75/0x370 [ 2558.720063][T26867] crypto_create_tfm_node+0x7f/0x320 [ 2558.725375][T26867] crypto_alloc_tfm_node+0x107/0x260 [ 2558.730689][T26867] cryptd_alloc_aead+0x101/0x200 [ 2558.735657][T26867] ? cryptd_alloc_ahash+0x200/0x200 [ 2558.740887][T26867] ? __kmalloc_node+0x62/0x370 [ 2558.745692][T26867] simd_aead_init+0x67/0x1b0 [ 2558.750299][T26867] ? simd_aead_exit+0x40/0x40 [ 2558.755006][T26867] crypto_aead_init_tfm+0x138/0x1a0 [ 2558.760232][T26867] crypto_create_tfm_node+0x10d/0x320 [ 2558.765635][T26867] crypto_alloc_tfm_node+0x107/0x260 [ 2558.770952][T26867] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2558.776710][T26867] tipc_crypto_key_init+0x82/0x110 [ 2558.781854][T26867] ? tipc_ehdr_validate+0x240/0x240 [ 2558.787074][T26867] ? crypto_mod_put+0x8c/0x100 [ 2558.791867][T26867] tipc_nl_node_set_key+0xa5d/0xf70 [ 2558.797091][T26867] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2558.803362][T26867] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2558.809626][T26867] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2558.817059][T26867] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2558.824517][T26867] genl_family_rcv_msg_doit+0x228/0x320 [ 2558.830093][T26867] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2558.837493][T26867] ? mutex_lock_io_nested+0x1150/0x1150 [ 2558.843080][T26867] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2558.849352][T26867] ? __radix_tree_lookup+0x211/0x2a0 [ 2558.854687][T26867] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2558.860953][T26867] ? genl_get_cmd+0x3cf/0x480 [ 2558.865662][T26867] genl_rcv_msg+0x328/0x580 [ 2558.870194][T26867] ? genl_get_cmd+0x480/0x480 [ 2558.874902][T26867] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2558.881174][T26867] ? lock_release+0x720/0x720 [ 2558.885898][T26867] ? check_path.constprop.0+0x50/0x50 [ 2558.891292][T26867] netlink_rcv_skb+0x153/0x420 [ 2558.896082][T26867] ? genl_get_cmd+0x480/0x480 [ 2558.900784][T26867] ? netlink_ack+0xa60/0xa60 [ 2558.905413][T26867] ? netlink_deliver_tap+0x1b1/0xc30 [ 2558.910722][T26867] ? _copy_from_iter+0x12b/0x1320 [ 2558.915778][T26867] genl_rcv+0x24/0x40 [ 2558.919781][T26867] netlink_unicast+0x533/0x7d0 [ 2558.924578][T26867] ? netlink_attachskb+0x880/0x880 [ 2558.929713][T26867] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2558.935981][T26867] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2558.942251][T26867] ? __phys_addr_symbol+0x2c/0x70 [ 2558.947298][T26867] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2558.953044][T26867] ? __check_object_size+0x16e/0x3f0 [ 2558.958360][T26867] netlink_sendmsg+0x86d/0xda0 [ 2558.963159][T26867] ? netlink_unicast+0x7d0/0x7d0 [ 2558.968137][T26867] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2558.974408][T26867] ? netlink_unicast+0x7d0/0x7d0 [ 2558.979371][T26867] sock_sendmsg+0xcf/0x120 [ 2558.983816][T26867] ____sys_sendmsg+0x6e8/0x810 [ 2558.988616][T26867] ? kernel_sendmsg+0x50/0x50 [ 2558.993317][T26867] ? do_recvmmsg+0x6d0/0x6d0 [ 2558.997962][T26867] ? perf_trace_lock+0xeb/0x4d0 [ 2559.002831][T26867] ? lock_chain_count+0x20/0x20 [ 2559.007713][T26867] ? check_path.constprop.0+0x50/0x50 [ 2559.013111][T26867] ___sys_sendmsg+0xf3/0x170 [ 2559.017727][T26867] ? sendmsg_copy_msghdr+0x160/0x160 [ 2559.023049][T26867] ? __fget_files+0x21b/0x3e0 [ 2559.027754][T26867] ? lock_downgrade+0x6e0/0x6e0 [ 2559.032648][T26867] ? __fget_files+0x23d/0x3e0 [ 2559.037363][T26867] ? __fget_light+0xea/0x280 [ 2559.041974][T26867] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2559.048254][T26867] __sys_sendmsg+0xe5/0x1b0 [ 2559.052777][T26867] ? __sys_sendmsg_sock+0x30/0x30 [ 2559.057840][T26867] ? syscall_enter_from_user_mode+0x21/0x70 [ 2559.063761][T26867] do_syscall_64+0x35/0xb0 [ 2559.068209][T26867] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2559.074133][T26867] RIP: 0033:0x7f2d0d66eae9 [ 2559.078580][T26867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2559.098211][T26867] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2559.106656][T26867] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2559.114647][T26867] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 19:23:10 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298f7) 19:23:10 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2b00}, 0x0) 19:23:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84f4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2559.122633][T26867] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2559.130617][T26867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2559.138602][T26867] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2559.146613][T26867] 19:23:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4800, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 26) 19:23:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4900, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2559.315024][T26891] FAULT_INJECTION: forcing a failure. [ 2559.315024][T26891] name failslab, interval 1, probability 0, space 0, times 0 [ 2559.327930][T26891] CPU: 0 PID: 26891 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2559.336370][T26891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2559.346444][T26891] Call Trace: [ 2559.349732][T26891] [ 2559.352673][T26891] dump_stack_lvl+0xcd/0x134 [ 2559.357307][T26891] should_fail.cold+0x5/0xa [ 2559.361844][T26891] ? crypto_create_tfm_node+0x7f/0x320 [ 2559.367327][T26891] should_failslab+0x5/0x10 [ 2559.371850][T26891] __kmalloc_node+0x75/0x370 [ 2559.376470][T26891] crypto_create_tfm_node+0x7f/0x320 [ 2559.381780][T26891] crypto_spawn_tfm2+0x60/0xb0 [ 2559.386565][T26891] ? cryptd_hash_init_tfm+0x120/0x120 [ 2559.391964][T26891] cryptd_aead_init_tfm+0x3c/0x140 [ 2559.397105][T26891] ? cryptd_hash_init_tfm+0x120/0x120 [ 2559.402601][T26891] crypto_aead_init_tfm+0x138/0x1a0 [ 2559.407824][T26891] crypto_create_tfm_node+0x10d/0x320 [ 2559.413240][T26891] crypto_alloc_tfm_node+0x107/0x260 [ 2559.418555][T26891] cryptd_alloc_aead+0x101/0x200 [ 2559.423516][T26891] ? cryptd_alloc_ahash+0x200/0x200 [ 2559.428755][T26891] ? __kmalloc_node+0x62/0x370 [ 2559.433564][T26891] simd_aead_init+0x67/0x1b0 [ 2559.438171][T26891] ? simd_aead_exit+0x40/0x40 [ 2559.442876][T26891] crypto_aead_init_tfm+0x138/0x1a0 [ 2559.448103][T26891] crypto_create_tfm_node+0x10d/0x320 [ 2559.453500][T26891] crypto_alloc_tfm_node+0x107/0x260 [ 2559.458815][T26891] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2559.464575][T26891] tipc_crypto_key_init+0x82/0x110 [ 2559.469709][T26891] ? tipc_ehdr_validate+0x240/0x240 [ 2559.474931][T26891] ? crypto_mod_put+0x8c/0x100 [ 2559.479755][T26891] tipc_nl_node_set_key+0xa5d/0xf70 [ 2559.484981][T26891] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2559.491254][T26891] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2559.497520][T26891] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2559.504922][T26891] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2559.512248][T26891] genl_family_rcv_msg_doit+0x228/0x320 [ 2559.517826][T26891] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2559.525229][T26891] ? mutex_lock_io_nested+0x1150/0x1150 [ 2559.530812][T26891] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2559.537077][T26891] ? __radix_tree_lookup+0x211/0x2a0 [ 2559.542385][T26891] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2559.548649][T26891] ? genl_get_cmd+0x3cf/0x480 [ 2559.553357][T26891] genl_rcv_msg+0x328/0x580 [ 2559.557891][T26891] ? genl_get_cmd+0x480/0x480 [ 2559.562587][T26891] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2559.568849][T26891] ? lock_release+0x720/0x720 [ 2559.573535][T26891] ? check_path.constprop.0+0x50/0x50 [ 2559.578939][T26891] netlink_rcv_skb+0x153/0x420 [ 2559.583728][T26891] ? genl_get_cmd+0x480/0x480 [ 2559.588433][T26891] ? netlink_ack+0xa60/0xa60 [ 2559.593055][T26891] ? netlink_deliver_tap+0x1b1/0xc30 [ 2559.598360][T26891] ? _copy_from_iter+0x12b/0x1320 [ 2559.603443][T26891] genl_rcv+0x24/0x40 [ 2559.607428][T26891] netlink_unicast+0x533/0x7d0 [ 2559.612200][T26891] ? netlink_attachskb+0x880/0x880 [ 2559.617322][T26891] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2559.623570][T26891] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2559.629826][T26891] ? __phys_addr_symbol+0x2c/0x70 [ 2559.634863][T26891] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2559.640582][T26891] ? __check_object_size+0x16e/0x3f0 [ 2559.645871][T26891] netlink_sendmsg+0x86d/0xda0 [ 2559.650644][T26891] ? netlink_unicast+0x7d0/0x7d0 [ 2559.655588][T26891] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2559.661834][T26891] ? netlink_unicast+0x7d0/0x7d0 [ 2559.666797][T26891] sock_sendmsg+0xcf/0x120 [ 2559.671224][T26891] ____sys_sendmsg+0x6e8/0x810 [ 2559.675996][T26891] ? kernel_sendmsg+0x50/0x50 [ 2559.680673][T26891] ? do_recvmmsg+0x6d0/0x6d0 [ 2559.685264][T26891] ? perf_trace_lock+0xeb/0x4d0 [ 2559.690126][T26891] ? lock_chain_count+0x20/0x20 [ 2559.694981][T26891] ? check_path.constprop.0+0x50/0x50 [ 2559.700358][T26891] ___sys_sendmsg+0xf3/0x170 [ 2559.704948][T26891] ? sendmsg_copy_msghdr+0x160/0x160 [ 2559.710237][T26891] ? __fget_files+0x21b/0x3e0 [ 2559.714916][T26891] ? lock_downgrade+0x6e0/0x6e0 [ 2559.719783][T26891] ? __fget_files+0x23d/0x3e0 [ 2559.724465][T26891] ? __fget_light+0xea/0x280 [ 2559.729055][T26891] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2559.735305][T26891] __sys_sendmsg+0xe5/0x1b0 [ 2559.739805][T26891] ? __sys_sendmsg_sock+0x30/0x30 [ 2559.744838][T26891] ? syscall_enter_from_user_mode+0x21/0x70 [ 2559.750732][T26891] do_syscall_64+0x35/0xb0 [ 2559.755252][T26891] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2559.761155][T26891] RIP: 0033:0x7f2d0d66eae9 [ 2559.765614][T26891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2559.785220][T26891] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2559.793629][T26891] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2559.801598][T26891] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2559.809564][T26891] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2559.817532][T26891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2559.825497][T26891] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2559.833478][T26891] 19:23:11 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2c00}, 0x0) 19:23:11 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298f8) 19:23:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84f5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4a00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 27) [ 2559.981912][T26902] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 19:23:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4b00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2560.101312][T26902] device 1199 entered promiscuous mode [ 2560.108437][T26912] FAULT_INJECTION: forcing a failure. [ 2560.108437][T26912] name failslab, interval 1, probability 0, space 0, times 0 [ 2560.121142][T26912] CPU: 0 PID: 26912 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2560.129578][T26912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2560.139682][T26912] Call Trace: [ 2560.142978][T26912] [ 2560.145923][T26912] dump_stack_lvl+0xcd/0x134 [ 2560.150539][T26912] should_fail.cold+0x5/0xa [ 2560.155077][T26912] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2560.160996][T26912] should_failslab+0x5/0x10 [ 2560.165523][T26912] kmem_cache_alloc_trace+0x55/0x2b0 [ 2560.170829][T26912] ? crypto_aead_setkey+0x10f/0x290 [ 2560.176056][T26912] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2560.181816][T26912] tipc_crypto_key_init+0x82/0x110 [ 2560.186951][T26912] ? tipc_ehdr_validate+0x240/0x240 [ 2560.192169][T26912] ? crypto_mod_put+0x8c/0x100 [ 2560.196964][T26912] tipc_nl_node_set_key+0xa5d/0xf70 [ 2560.202192][T26912] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2560.208468][T26912] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2560.214823][T26912] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2560.222224][T26912] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2560.229548][T26912] genl_family_rcv_msg_doit+0x228/0x320 [ 2560.235125][T26912] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2560.242525][T26912] ? mutex_lock_io_nested+0x1150/0x1150 [ 2560.248112][T26912] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2560.254392][T26912] ? __radix_tree_lookup+0x211/0x2a0 [ 2560.259707][T26912] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2560.265974][T26912] ? genl_get_cmd+0x3cf/0x480 [ 2560.270684][T26912] genl_rcv_msg+0x328/0x580 [ 2560.275223][T26912] ? genl_get_cmd+0x480/0x480 [ 2560.279921][T26912] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2560.286200][T26912] ? lock_release+0x720/0x720 [ 2560.290896][T26912] ? check_path.constprop.0+0x50/0x50 [ 2560.296299][T26912] netlink_rcv_skb+0x153/0x420 [ 2560.301119][T26912] ? genl_get_cmd+0x480/0x480 [ 2560.305825][T26912] ? netlink_ack+0xa60/0xa60 [ 2560.310444][T26912] ? netlink_deliver_tap+0x1b1/0xc30 [ 2560.315751][T26912] ? _copy_from_iter+0x12b/0x1320 [ 2560.320806][T26912] genl_rcv+0x24/0x40 [ 2560.324809][T26912] netlink_unicast+0x533/0x7d0 [ 2560.329609][T26912] ? netlink_attachskb+0x880/0x880 [ 2560.334745][T26912] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2560.341017][T26912] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2560.347316][T26912] ? __phys_addr_symbol+0x2c/0x70 [ 2560.352361][T26912] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2560.358105][T26912] ? __check_object_size+0x16e/0x3f0 [ 2560.363454][T26912] netlink_sendmsg+0x86d/0xda0 [ 2560.368251][T26912] ? netlink_unicast+0x7d0/0x7d0 [ 2560.373221][T26912] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2560.379498][T26912] ? netlink_unicast+0x7d0/0x7d0 [ 2560.384459][T26912] sock_sendmsg+0xcf/0x120 [ 2560.388901][T26912] ____sys_sendmsg+0x6e8/0x810 [ 2560.393702][T26912] ? kernel_sendmsg+0x50/0x50 [ 2560.398407][T26912] ? do_recvmmsg+0x6d0/0x6d0 [ 2560.403018][T26912] ? perf_trace_lock+0xeb/0x4d0 [ 2560.407887][T26912] ? lock_chain_count+0x20/0x20 [ 2560.412768][T26912] ? check_path.constprop.0+0x50/0x50 [ 2560.418170][T26912] ___sys_sendmsg+0xf3/0x170 [ 2560.422784][T26912] ? sendmsg_copy_msghdr+0x160/0x160 [ 2560.428094][T26912] ? __fget_files+0x21b/0x3e0 [ 2560.432883][T26912] ? lock_downgrade+0x6e0/0x6e0 [ 2560.437773][T26912] ? __fget_files+0x23d/0x3e0 [ 2560.442481][T26912] ? __fget_light+0xea/0x280 [ 2560.447096][T26912] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2560.453363][T26912] __sys_sendmsg+0xe5/0x1b0 [ 2560.457887][T26912] ? __sys_sendmsg_sock+0x30/0x30 [ 2560.462992][T26912] ? syscall_enter_from_user_mode+0x21/0x70 [ 2560.468943][T26912] do_syscall_64+0x35/0xb0 [ 2560.473382][T26912] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2560.479295][T26912] RIP: 0033:0x7f2d0d66eae9 [ 2560.483726][T26912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2560.503348][T26912] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2560.511781][T26912] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2560.519764][T26912] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2560.527747][T26912] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2560.535730][T26912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2560.543715][T26912] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 19:23:11 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298f9) 19:23:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84f6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:11 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2d00}, 0x0) [ 2560.551726][T26912] 19:23:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4c00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 28) 19:23:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4d00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2560.721822][T26934] FAULT_INJECTION: forcing a failure. [ 2560.721822][T26934] name failslab, interval 1, probability 0, space 0, times 0 [ 2560.734652][T26934] CPU: 0 PID: 26934 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2560.743093][T26934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2560.753206][T26934] Call Trace: [ 2560.756520][T26934] [ 2560.759463][T26934] dump_stack_lvl+0xcd/0x134 [ 2560.764081][T26934] should_fail.cold+0x5/0xa [ 2560.768628][T26934] ? crypto_create_tfm_node+0x7f/0x320 [ 2560.774116][T26934] should_failslab+0x5/0x10 [ 2560.778638][T26934] __kmalloc_node+0x75/0x370 [ 2560.783256][T26934] crypto_create_tfm_node+0x7f/0x320 [ 2560.788566][T26934] crypto_alloc_tfm_node+0x107/0x260 [ 2560.793881][T26934] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2560.799646][T26934] tipc_crypto_key_init+0x82/0x110 [ 2560.804784][T26934] ? tipc_ehdr_validate+0x240/0x240 [ 2560.810008][T26934] ? crypto_mod_put+0x8c/0x100 [ 2560.814806][T26934] tipc_nl_node_set_key+0xa5d/0xf70 [ 2560.820035][T26934] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2560.826316][T26934] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2560.832584][T26934] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2560.839986][T26934] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2560.847308][T26934] genl_family_rcv_msg_doit+0x228/0x320 [ 2560.852887][T26934] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2560.860288][T26934] ? mutex_lock_io_nested+0x1150/0x1150 [ 2560.865956][T26934] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2560.872223][T26934] ? __radix_tree_lookup+0x211/0x2a0 [ 2560.877537][T26934] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2560.883801][T26934] ? genl_get_cmd+0x3cf/0x480 [ 2560.888503][T26934] genl_rcv_msg+0x328/0x580 [ 2560.893038][T26934] ? genl_get_cmd+0x480/0x480 [ 2560.897741][T26934] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2560.904017][T26934] ? lock_release+0x720/0x720 [ 2560.908708][T26934] ? check_path.constprop.0+0x50/0x50 [ 2560.914110][T26934] netlink_rcv_skb+0x153/0x420 [ 2560.918900][T26934] ? genl_get_cmd+0x480/0x480 [ 2560.923608][T26934] ? netlink_ack+0xa60/0xa60 [ 2560.928231][T26934] ? netlink_deliver_tap+0x1b1/0xc30 [ 2560.933543][T26934] ? _copy_from_iter+0x12b/0x1320 [ 2560.938600][T26934] genl_rcv+0x24/0x40 [ 2560.942605][T26934] netlink_unicast+0x533/0x7d0 [ 2560.947400][T26934] ? netlink_attachskb+0x880/0x880 [ 2560.952531][T26934] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2560.958797][T26934] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2560.965061][T26934] ? __phys_addr_symbol+0x2c/0x70 [ 2560.970106][T26934] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2560.975849][T26934] ? __check_object_size+0x16e/0x3f0 [ 2560.981161][T26934] netlink_sendmsg+0x86d/0xda0 [ 2560.985956][T26934] ? netlink_unicast+0x7d0/0x7d0 [ 2560.990928][T26934] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2560.997203][T26934] ? netlink_unicast+0x7d0/0x7d0 [ 2561.002183][T26934] sock_sendmsg+0xcf/0x120 [ 2561.006633][T26934] ____sys_sendmsg+0x6e8/0x810 [ 2561.011452][T26934] ? kernel_sendmsg+0x50/0x50 [ 2561.016152][T26934] ? do_recvmmsg+0x6d0/0x6d0 [ 2561.020763][T26934] ? perf_trace_lock+0xeb/0x4d0 [ 2561.025643][T26934] ? lock_chain_count+0x20/0x20 [ 2561.030525][T26934] ? check_path.constprop.0+0x50/0x50 [ 2561.035925][T26934] ___sys_sendmsg+0xf3/0x170 [ 2561.040542][T26934] ? sendmsg_copy_msghdr+0x160/0x160 [ 2561.045853][T26934] ? __fget_files+0x21b/0x3e0 [ 2561.050599][T26934] ? lock_downgrade+0x6e0/0x6e0 [ 2561.055486][T26934] ? __fget_files+0x23d/0x3e0 [ 2561.060196][T26934] ? __fget_light+0xea/0x280 [ 2561.064809][T26934] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2561.071085][T26934] __sys_sendmsg+0xe5/0x1b0 [ 2561.075609][T26934] ? __sys_sendmsg_sock+0x30/0x30 [ 2561.080675][T26934] ? syscall_enter_from_user_mode+0x21/0x70 [ 2561.086593][T26934] do_syscall_64+0x35/0xb0 [ 2561.091031][T26934] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2561.096949][T26934] RIP: 0033:0x7f2d0d66eae9 [ 2561.101380][T26934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:23:12 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2e00}, 0x0) 19:23:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84f7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:12 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298fa) 19:23:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2561.121006][T26934] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2561.129462][T26934] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2561.137449][T26934] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2561.145432][T26934] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2561.153404][T26934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2561.161386][T26934] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2561.169461][T26934] 19:23:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4e00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 29) 19:23:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x4f00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2561.299104][T26950] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2561.317294][T26950] device 1200 entered promiscuous mode [ 2561.350541][T26958] FAULT_INJECTION: forcing a failure. [ 2561.350541][T26958] name failslab, interval 1, probability 0, space 0, times 0 [ 2561.363525][T26958] CPU: 0 PID: 26958 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2561.371967][T26958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2561.382039][T26958] Call Trace: [ 2561.385338][T26958] [ 2561.388280][T26958] dump_stack_lvl+0xcd/0x134 [ 2561.392898][T26958] should_fail.cold+0x5/0xa [ 2561.397433][T26958] ? crypto_create_tfm_node+0x7f/0x320 [ 2561.402915][T26958] should_failslab+0x5/0x10 [ 2561.407436][T26958] __kmalloc_node+0x75/0x370 [ 2561.412062][T26958] crypto_create_tfm_node+0x7f/0x320 [ 2561.417378][T26958] crypto_alloc_tfm_node+0x107/0x260 [ 2561.422698][T26958] cryptd_alloc_aead+0x101/0x200 [ 2561.427665][T26958] ? cryptd_alloc_ahash+0x200/0x200 [ 2561.432895][T26958] ? __kmalloc_node+0x62/0x370 [ 2561.437686][T26958] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2561.443969][T26958] simd_aead_init+0x67/0x1b0 [ 2561.448579][T26958] ? simd_aead_exit+0x40/0x40 [ 2561.453275][T26958] crypto_aead_init_tfm+0x138/0x1a0 [ 2561.458502][T26958] crypto_create_tfm_node+0x10d/0x320 [ 2561.463923][T26958] crypto_alloc_tfm_node+0x107/0x260 [ 2561.469240][T26958] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2561.475005][T26958] tipc_crypto_key_init+0x82/0x110 [ 2561.480181][T26958] ? tipc_ehdr_validate+0x240/0x240 [ 2561.485403][T26958] ? crypto_mod_put+0x8c/0x100 [ 2561.490200][T26958] tipc_nl_node_set_key+0xa5d/0xf70 [ 2561.495427][T26958] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2561.501700][T26958] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2561.507964][T26958] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2561.515367][T26958] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2561.522682][T26958] genl_family_rcv_msg_doit+0x228/0x320 [ 2561.528256][T26958] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2561.535661][T26958] ? mutex_lock_io_nested+0x1150/0x1150 [ 2561.541247][T26958] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2561.547538][T26958] ? __radix_tree_lookup+0x211/0x2a0 [ 2561.552832][T26958] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2561.559097][T26958] ? genl_get_cmd+0x3cf/0x480 [ 2561.563781][T26958] genl_rcv_msg+0x328/0x580 [ 2561.568293][T26958] ? genl_get_cmd+0x480/0x480 [ 2561.572973][T26958] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2561.579223][T26958] ? lock_release+0x720/0x720 [ 2561.583903][T26958] ? check_path.constprop.0+0x50/0x50 [ 2561.589279][T26958] netlink_rcv_skb+0x153/0x420 [ 2561.594052][T26958] ? genl_get_cmd+0x480/0x480 [ 2561.598732][T26958] ? netlink_ack+0xa60/0xa60 [ 2561.603329][T26958] ? netlink_deliver_tap+0x1b1/0xc30 [ 2561.608616][T26958] ? _copy_from_iter+0x12b/0x1320 [ 2561.613661][T26958] genl_rcv+0x24/0x40 [ 2561.617647][T26958] netlink_unicast+0x533/0x7d0 [ 2561.622418][T26958] ? netlink_attachskb+0x880/0x880 [ 2561.627529][T26958] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2561.633829][T26958] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2561.640106][T26958] ? __phys_addr_symbol+0x2c/0x70 [ 2561.645144][T26958] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2561.650889][T26958] ? __check_object_size+0x16e/0x3f0 [ 2561.656189][T26958] netlink_sendmsg+0x86d/0xda0 [ 2561.660987][T26958] ? netlink_unicast+0x7d0/0x7d0 [ 2561.665961][T26958] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2561.672225][T26958] ? netlink_unicast+0x7d0/0x7d0 [ 2561.677179][T26958] sock_sendmsg+0xcf/0x120 [ 2561.681639][T26958] ____sys_sendmsg+0x6e8/0x810 [ 2561.686417][T26958] ? kernel_sendmsg+0x50/0x50 [ 2561.691103][T26958] ? do_recvmmsg+0x6d0/0x6d0 [ 2561.695700][T26958] ? perf_trace_lock+0xeb/0x4d0 [ 2561.700564][T26958] ? lock_chain_count+0x20/0x20 [ 2561.705425][T26958] ? check_path.constprop.0+0x50/0x50 [ 2561.710807][T26958] ___sys_sendmsg+0xf3/0x170 [ 2561.715402][T26958] ? sendmsg_copy_msghdr+0x160/0x160 [ 2561.720695][T26958] ? __fget_files+0x21b/0x3e0 [ 2561.725372][T26958] ? lock_downgrade+0x6e0/0x6e0 [ 2561.730236][T26958] ? __fget_files+0x23d/0x3e0 [ 2561.734920][T26958] ? __fget_light+0xea/0x280 [ 2561.739512][T26958] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2561.745787][T26958] __sys_sendmsg+0xe5/0x1b0 [ 2561.750288][T26958] ? __sys_sendmsg_sock+0x30/0x30 [ 2561.755327][T26958] ? syscall_enter_from_user_mode+0x21/0x70 [ 2561.761226][T26958] do_syscall_64+0x35/0xb0 [ 2561.765641][T26958] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2561.771543][T26958] RIP: 0033:0x7f2d0d66eae9 [ 2561.775956][T26958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:23:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84f8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:13 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x2f00}, 0x0) [ 2561.795574][T26958] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2561.803998][T26958] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2561.812065][T26958] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2561.820054][T26958] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2561.828033][T26958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2561.836014][T26958] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2561.844016][T26958] 19:23:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5000, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 30) 19:23:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5100, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2562.017846][T26972] FAULT_INJECTION: forcing a failure. [ 2562.017846][T26972] name failslab, interval 1, probability 0, space 0, times 0 [ 2562.030607][T26972] CPU: 0 PID: 26972 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2562.039048][T26972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2562.049118][T26972] Call Trace: [ 2562.052407][T26972] [ 2562.055353][T26972] dump_stack_lvl+0xcd/0x134 [ 2562.059974][T26972] should_fail.cold+0x5/0xa [ 2562.064515][T26972] ? crypto_create_tfm_node+0x7f/0x320 [ 2562.070002][T26972] should_failslab+0x5/0x10 [ 2562.074534][T26972] __kmalloc_node+0x75/0x370 [ 2562.079154][T26972] crypto_create_tfm_node+0x7f/0x320 [ 2562.084469][T26972] crypto_spawn_tfm2+0x60/0xb0 [ 2562.089259][T26972] ? cryptd_hash_init_tfm+0x120/0x120 [ 2562.094656][T26972] cryptd_aead_init_tfm+0x3c/0x140 [ 2562.099796][T26972] ? cryptd_hash_init_tfm+0x120/0x120 [ 2562.105194][T26972] crypto_aead_init_tfm+0x138/0x1a0 [ 2562.110422][T26972] crypto_create_tfm_node+0x10d/0x320 [ 2562.115829][T26972] crypto_alloc_tfm_node+0x107/0x260 [ 2562.121148][T26972] cryptd_alloc_aead+0x101/0x200 [ 2562.126111][T26972] ? cryptd_alloc_ahash+0x200/0x200 [ 2562.131340][T26972] ? __kmalloc_node+0x62/0x370 [ 2562.136150][T26972] simd_aead_init+0x67/0x1b0 [ 2562.140764][T26972] ? simd_aead_exit+0x40/0x40 [ 2562.145464][T26972] crypto_aead_init_tfm+0x138/0x1a0 [ 2562.150693][T26972] crypto_create_tfm_node+0x10d/0x320 [ 2562.156090][T26972] crypto_alloc_tfm_node+0x107/0x260 [ 2562.161409][T26972] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2562.167170][T26972] tipc_crypto_key_init+0x82/0x110 [ 2562.172301][T26972] ? tipc_ehdr_validate+0x240/0x240 [ 2562.177514][T26972] ? crypto_mod_put+0x8c/0x100 [ 2562.182324][T26972] tipc_nl_node_set_key+0xa5d/0xf70 [ 2562.187551][T26972] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2562.193824][T26972] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2562.200093][T26972] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2562.207489][T26972] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2562.214845][T26972] genl_family_rcv_msg_doit+0x228/0x320 [ 2562.220416][T26972] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2562.227809][T26972] ? mutex_lock_io_nested+0x1150/0x1150 [ 2562.233393][T26972] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2562.239664][T26972] ? __radix_tree_lookup+0x211/0x2a0 [ 2562.244973][T26972] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2562.251238][T26972] ? genl_get_cmd+0x3cf/0x480 [ 2562.255944][T26972] genl_rcv_msg+0x328/0x580 [ 2562.260477][T26972] ? genl_get_cmd+0x480/0x480 [ 2562.265185][T26972] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2562.271457][T26972] ? lock_release+0x720/0x720 [ 2562.276160][T26972] ? check_path.constprop.0+0x50/0x50 [ 2562.281561][T26972] netlink_rcv_skb+0x153/0x420 [ 2562.286348][T26972] ? genl_get_cmd+0x480/0x480 [ 2562.291052][T26972] ? netlink_ack+0xa60/0xa60 [ 2562.295676][T26972] ? netlink_deliver_tap+0x1b1/0xc30 [ 2562.300987][T26972] ? _copy_from_iter+0x12b/0x1320 [ 2562.306045][T26972] genl_rcv+0x24/0x40 [ 2562.310050][T26972] netlink_unicast+0x533/0x7d0 [ 2562.314847][T26972] ? netlink_attachskb+0x880/0x880 [ 2562.319982][T26972] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2562.326249][T26972] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2562.332519][T26972] ? __phys_addr_symbol+0x2c/0x70 [ 2562.337570][T26972] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2562.343314][T26972] ? __check_object_size+0x16e/0x3f0 [ 2562.348628][T26972] netlink_sendmsg+0x86d/0xda0 [ 2562.353423][T26972] ? netlink_unicast+0x7d0/0x7d0 [ 2562.358397][T26972] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2562.364667][T26972] ? netlink_unicast+0x7d0/0x7d0 [ 2562.369628][T26972] sock_sendmsg+0xcf/0x120 [ 2562.374074][T26972] ____sys_sendmsg+0x6e8/0x810 [ 2562.378870][T26972] ? kernel_sendmsg+0x50/0x50 [ 2562.383574][T26972] ? do_recvmmsg+0x6d0/0x6d0 [ 2562.388189][T26972] ? perf_trace_lock+0xeb/0x4d0 [ 2562.393058][T26972] ? lock_chain_count+0x20/0x20 [ 2562.397939][T26972] ? check_path.constprop.0+0x50/0x50 [ 2562.403341][T26972] ___sys_sendmsg+0xf3/0x170 [ 2562.407957][T26972] ? sendmsg_copy_msghdr+0x160/0x160 [ 2562.413270][T26972] ? __fget_files+0x21b/0x3e0 [ 2562.417972][T26972] ? lock_downgrade+0x6e0/0x6e0 [ 2562.422871][T26972] ? __fget_files+0x23d/0x3e0 [ 2562.427584][T26972] ? __fget_light+0xea/0x280 [ 2562.432199][T26972] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2562.438475][T26972] __sys_sendmsg+0xe5/0x1b0 [ 2562.443009][T26972] ? __sys_sendmsg_sock+0x30/0x30 [ 2562.448072][T26972] ? syscall_enter_from_user_mode+0x21/0x70 [ 2562.454002][T26972] do_syscall_64+0x35/0xb0 [ 2562.458446][T26972] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2562.464365][T26972] RIP: 0033:0x7f2d0d66eae9 [ 2562.468798][T26972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2562.488461][T26972] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2562.496903][T26972] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2562.504891][T26972] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 19:23:13 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3000}, 0x0) 19:23:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298fb) 19:23:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84f9}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2562.512877][T26972] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2562.520862][T26972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2562.528846][T26972] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2562.536856][T26972] 19:23:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 31) [ 2562.655137][T26989] FAULT_INJECTION: forcing a failure. [ 2562.655137][T26989] name failslab, interval 1, probability 0, space 0, times 0 [ 2562.668090][T26989] CPU: 0 PID: 26989 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2562.676533][T26989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2562.686610][T26989] Call Trace: [ 2562.689907][T26989] [ 2562.692845][T26989] dump_stack_lvl+0xcd/0x134 [ 2562.697467][T26989] should_fail.cold+0x5/0xa [ 2562.702003][T26989] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2562.707918][T26989] should_failslab+0x5/0x10 [ 2562.712441][T26989] kmem_cache_alloc_trace+0x55/0x2b0 [ 2562.717756][T26989] ? crypto_aead_setkey+0x10f/0x290 [ 2562.722994][T26989] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2562.728765][T26989] tipc_crypto_key_init+0x82/0x110 [ 2562.733901][T26989] ? tipc_ehdr_validate+0x240/0x240 [ 2562.739121][T26989] ? crypto_mod_put+0x8c/0x100 [ 2562.743922][T26989] tipc_nl_node_set_key+0xa5d/0xf70 [ 2562.749153][T26989] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2562.755427][T26989] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2562.761701][T26989] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2562.769109][T26989] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2562.776426][T26989] genl_family_rcv_msg_doit+0x228/0x320 [ 2562.782011][T26989] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2562.789409][T26989] ? mutex_lock_io_nested+0x1150/0x1150 [ 2562.795011][T26989] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2562.801279][T26989] ? __radix_tree_lookup+0x211/0x2a0 [ 2562.806585][T26989] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2562.812856][T26989] ? genl_get_cmd+0x3cf/0x480 [ 2562.817654][T26989] genl_rcv_msg+0x328/0x580 [ 2562.822190][T26989] ? genl_get_cmd+0x480/0x480 [ 2562.826900][T26989] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2562.833170][T26989] ? lock_release+0x720/0x720 [ 2562.837871][T26989] ? check_path.constprop.0+0x50/0x50 [ 2562.843276][T26989] netlink_rcv_skb+0x153/0x420 [ 2562.848066][T26989] ? genl_get_cmd+0x480/0x480 [ 2562.852775][T26989] ? netlink_ack+0xa60/0xa60 [ 2562.857401][T26989] ? netlink_deliver_tap+0x1b1/0xc30 [ 2562.862709][T26989] ? _copy_from_iter+0x12b/0x1320 [ 2562.867771][T26989] genl_rcv+0x24/0x40 [ 2562.871776][T26989] netlink_unicast+0x533/0x7d0 [ 2562.876571][T26989] ? netlink_attachskb+0x880/0x880 [ 2562.881702][T26989] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2562.887971][T26989] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2562.894236][T26989] ? __phys_addr_symbol+0x2c/0x70 [ 2562.899281][T26989] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2562.905126][T26989] ? __check_object_size+0x16e/0x3f0 [ 2562.910436][T26989] netlink_sendmsg+0x86d/0xda0 [ 2562.915244][T26989] ? netlink_unicast+0x7d0/0x7d0 [ 2562.920215][T26989] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2562.926490][T26989] ? netlink_unicast+0x7d0/0x7d0 [ 2562.931459][T26989] sock_sendmsg+0xcf/0x120 [ 2562.935905][T26989] ____sys_sendmsg+0x6e8/0x810 [ 2562.940698][T26989] ? kernel_sendmsg+0x50/0x50 [ 2562.945408][T26989] ? do_recvmmsg+0x6d0/0x6d0 [ 2562.950031][T26989] ? perf_trace_lock+0xeb/0x4d0 [ 2562.954902][T26989] ? lock_chain_count+0x20/0x20 [ 2562.959782][T26989] ? check_path.constprop.0+0x50/0x50 [ 2562.965184][T26989] ___sys_sendmsg+0xf3/0x170 [ 2562.969797][T26989] ? sendmsg_copy_msghdr+0x160/0x160 [ 2562.975113][T26989] ? __fget_files+0x21b/0x3e0 [ 2562.979813][T26989] ? lock_downgrade+0x6e0/0x6e0 [ 2562.984705][T26989] ? __fget_files+0x23d/0x3e0 [ 2562.989416][T26989] ? __fget_light+0xea/0x280 [ 2562.994071][T26989] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2563.000347][T26989] __sys_sendmsg+0xe5/0x1b0 [ 2563.004873][T26989] ? __sys_sendmsg_sock+0x30/0x30 [ 2563.009950][T26989] ? syscall_enter_from_user_mode+0x21/0x70 [ 2563.015871][T26989] do_syscall_64+0x35/0xb0 [ 2563.020321][T26989] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2563.026234][T26989] RIP: 0033:0x7f2d0d66eae9 [ 2563.030666][T26989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:23:14 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3100}, 0x0) 19:23:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298fc) 19:23:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5200, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2563.050297][T26989] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2563.058734][T26989] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2563.066733][T26989] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2563.074721][T26989] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2563.082708][T26989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2563.090691][T26989] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2563.098702][T26989] 19:23:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 32) 19:23:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5300, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2563.238030][T27006] FAULT_INJECTION: forcing a failure. [ 2563.238030][T27006] name failslab, interval 1, probability 0, space 0, times 0 [ 2563.240119][T27005] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2563.250780][T27006] CPU: 0 PID: 27006 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2563.250812][T27006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2563.250828][T27006] Call Trace: [ 2563.250837][T27006] [ 2563.250848][T27006] dump_stack_lvl+0xcd/0x134 [ 2563.250883][T27006] should_fail.cold+0x5/0xa [ 2563.250921][T27006] ? crypto_create_tfm_node+0x7f/0x320 [ 2563.250949][T27006] should_failslab+0x5/0x10 [ 2563.250977][T27006] __kmalloc_node+0x75/0x370 [ 2563.251012][T27006] crypto_create_tfm_node+0x7f/0x320 [ 2563.312597][T27006] crypto_alloc_tfm_node+0x107/0x260 [ 2563.317924][T27006] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2563.323687][T27006] tipc_crypto_key_init+0x82/0x110 [ 2563.328825][T27006] ? tipc_ehdr_validate+0x240/0x240 [ 2563.334046][T27006] ? crypto_mod_put+0x8c/0x100 [ 2563.338853][T27006] tipc_nl_node_set_key+0xa5d/0xf70 [ 2563.344086][T27006] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2563.350363][T27006] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2563.356630][T27006] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2563.364024][T27006] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2563.371344][T27006] genl_family_rcv_msg_doit+0x228/0x320 [ 2563.376922][T27006] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2563.384319][T27006] ? mutex_lock_io_nested+0x1150/0x1150 [ 2563.389927][T27006] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2563.396203][T27006] ? __radix_tree_lookup+0x211/0x2a0 [ 2563.401511][T27006] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2563.407770][T27006] ? genl_get_cmd+0x3cf/0x480 [ 2563.412480][T27006] genl_rcv_msg+0x328/0x580 [ 2563.417031][T27006] ? genl_get_cmd+0x480/0x480 [ 2563.421735][T27006] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2563.428011][T27006] ? lock_release+0x720/0x720 [ 2563.432710][T27006] ? check_path.constprop.0+0x50/0x50 [ 2563.438112][T27006] netlink_rcv_skb+0x153/0x420 [ 2563.442995][T27006] ? genl_get_cmd+0x480/0x480 [ 2563.447701][T27006] ? netlink_ack+0xa60/0xa60 [ 2563.452327][T27006] ? netlink_deliver_tap+0x1b1/0xc30 [ 2563.457637][T27006] ? _copy_from_iter+0x12b/0x1320 [ 2563.462697][T27006] genl_rcv+0x24/0x40 [ 2563.466702][T27006] netlink_unicast+0x533/0x7d0 [ 2563.471494][T27006] ? netlink_attachskb+0x880/0x880 [ 2563.476630][T27006] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2563.482898][T27006] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2563.489163][T27006] ? __phys_addr_symbol+0x2c/0x70 [ 2563.494210][T27006] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2563.499955][T27006] ? __check_object_size+0x16e/0x3f0 [ 2563.505264][T27006] netlink_sendmsg+0x86d/0xda0 [ 2563.510060][T27006] ? netlink_unicast+0x7d0/0x7d0 [ 2563.515037][T27006] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2563.521474][T27006] ? netlink_unicast+0x7d0/0x7d0 [ 2563.526446][T27006] sock_sendmsg+0xcf/0x120 [ 2563.530895][T27006] ____sys_sendmsg+0x6e8/0x810 [ 2563.535688][T27006] ? kernel_sendmsg+0x50/0x50 [ 2563.540389][T27006] ? do_recvmmsg+0x6d0/0x6d0 [ 2563.545007][T27006] ? perf_trace_lock+0xeb/0x4d0 [ 2563.549879][T27006] ? lock_chain_count+0x20/0x20 [ 2563.554763][T27006] ? check_path.constprop.0+0x50/0x50 [ 2563.560167][T27006] ___sys_sendmsg+0xf3/0x170 [ 2563.564780][T27006] ? sendmsg_copy_msghdr+0x160/0x160 [ 2563.570096][T27006] ? __fget_files+0x21b/0x3e0 [ 2563.574798][T27006] ? lock_downgrade+0x6e0/0x6e0 [ 2563.579690][T27006] ? __fget_files+0x23d/0x3e0 [ 2563.584403][T27006] ? __fget_light+0xea/0x280 [ 2563.589017][T27006] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2563.595288][T27006] __sys_sendmsg+0xe5/0x1b0 [ 2563.599814][T27006] ? __sys_sendmsg_sock+0x30/0x30 [ 2563.604879][T27006] ? syscall_enter_from_user_mode+0x21/0x70 [ 2563.610804][T27006] do_syscall_64+0x35/0xb0 [ 2563.615246][T27006] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2563.621157][T27006] RIP: 0033:0x7f2d0d66eae9 [ 2563.625590][T27006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2563.645219][T27006] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2563.653658][T27006] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2563.661650][T27006] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2563.669638][T27006] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2563.677627][T27006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 19:23:14 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3200}, 0x0) 19:23:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84fa}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5400, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2563.685618][T27006] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2563.693635][T27006] [ 2563.713179][T27005] device 1201 entered promiscuous mode 19:23:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 33) 19:23:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5500, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2563.880210][T27029] FAULT_INJECTION: forcing a failure. [ 2563.880210][T27029] name failslab, interval 1, probability 0, space 0, times 0 [ 2563.893237][T27029] CPU: 0 PID: 27029 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2563.901680][T27029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2563.911741][T27029] Call Trace: [ 2563.915022][T27029] [ 2563.917951][T27029] dump_stack_lvl+0xcd/0x134 [ 2563.922548][T27029] should_fail.cold+0x5/0xa [ 2563.927060][T27029] ? crypto_create_tfm_node+0x7f/0x320 [ 2563.932522][T27029] should_failslab+0x5/0x10 [ 2563.937024][T27029] __kmalloc_node+0x75/0x370 [ 2563.941623][T27029] crypto_create_tfm_node+0x7f/0x320 [ 2563.946912][T27029] crypto_alloc_tfm_node+0x107/0x260 [ 2563.952212][T27029] cryptd_alloc_aead+0x101/0x200 [ 2563.957154][T27029] ? cryptd_alloc_ahash+0x200/0x200 [ 2563.962378][T27029] ? __kmalloc_node+0x62/0x370 [ 2563.967160][T27029] simd_aead_init+0x67/0x1b0 [ 2563.971751][T27029] ? simd_aead_exit+0x40/0x40 [ 2563.976425][T27029] crypto_aead_init_tfm+0x138/0x1a0 [ 2563.981627][T27029] crypto_create_tfm_node+0x10d/0x320 [ 2563.987003][T27029] crypto_alloc_tfm_node+0x107/0x260 [ 2563.992311][T27029] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2563.998046][T27029] tipc_crypto_key_init+0x82/0x110 [ 2564.003161][T27029] ? tipc_ehdr_validate+0x240/0x240 [ 2564.008360][T27029] ? crypto_mod_put+0x8c/0x100 [ 2564.013134][T27029] tipc_nl_node_set_key+0xa5d/0xf70 [ 2564.018339][T27029] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2564.024590][T27029] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2564.030849][T27029] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2564.038224][T27029] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2564.045516][T27029] genl_family_rcv_msg_doit+0x228/0x320 [ 2564.051064][T27029] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2564.058458][T27029] ? mutex_lock_io_nested+0x1150/0x1150 [ 2564.064019][T27029] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2564.070264][T27029] ? __radix_tree_lookup+0x211/0x2a0 [ 2564.075550][T27029] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2564.081793][T27029] ? genl_get_cmd+0x3cf/0x480 [ 2564.086476][T27029] genl_rcv_msg+0x328/0x580 [ 2564.090997][T27029] ? genl_get_cmd+0x480/0x480 [ 2564.095675][T27029] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2564.101928][T27029] ? lock_release+0x720/0x720 [ 2564.106605][T27029] ? check_path.constprop.0+0x50/0x50 [ 2564.112083][T27029] netlink_rcv_skb+0x153/0x420 [ 2564.116849][T27029] ? genl_get_cmd+0x480/0x480 [ 2564.121528][T27029] ? netlink_ack+0xa60/0xa60 [ 2564.126126][T27029] ? netlink_deliver_tap+0x1b1/0xc30 [ 2564.131409][T27029] ? _copy_from_iter+0x12b/0x1320 [ 2564.136439][T27029] genl_rcv+0x24/0x40 [ 2564.140419][T27029] netlink_unicast+0x533/0x7d0 [ 2564.145193][T27029] ? netlink_attachskb+0x880/0x880 [ 2564.150303][T27029] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2564.156547][T27029] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2564.162786][T27029] ? __phys_addr_symbol+0x2c/0x70 [ 2564.167812][T27029] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2564.173531][T27029] ? __check_object_size+0x16e/0x3f0 [ 2564.178817][T27029] netlink_sendmsg+0x86d/0xda0 [ 2564.183587][T27029] ? netlink_unicast+0x7d0/0x7d0 [ 2564.188544][T27029] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2564.194800][T27029] ? netlink_unicast+0x7d0/0x7d0 [ 2564.199740][T27029] sock_sendmsg+0xcf/0x120 [ 2564.204163][T27029] ____sys_sendmsg+0x6e8/0x810 [ 2564.208936][T27029] ? kernel_sendmsg+0x50/0x50 [ 2564.213613][T27029] ? do_recvmmsg+0x6d0/0x6d0 [ 2564.218201][T27029] ? perf_trace_lock+0xeb/0x4d0 [ 2564.223046][T27029] ? lock_chain_count+0x20/0x20 [ 2564.227898][T27029] ? check_path.constprop.0+0x50/0x50 [ 2564.233277][T27029] ___sys_sendmsg+0xf3/0x170 [ 2564.237870][T27029] ? sendmsg_copy_msghdr+0x160/0x160 [ 2564.243161][T27029] ? __fget_files+0x21b/0x3e0 [ 2564.247840][T27029] ? lock_downgrade+0x6e0/0x6e0 [ 2564.252702][T27029] ? __fget_files+0x23d/0x3e0 [ 2564.257385][T27029] ? __fget_light+0xea/0x280 [ 2564.261978][T27029] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2564.268226][T27029] __sys_sendmsg+0xe5/0x1b0 [ 2564.272729][T27029] ? __sys_sendmsg_sock+0x30/0x30 [ 2564.277764][T27029] ? syscall_enter_from_user_mode+0x21/0x70 [ 2564.283660][T27029] do_syscall_64+0x35/0xb0 [ 2564.288092][T27029] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2564.293983][T27029] RIP: 0033:0x7f2d0d66eae9 [ 2564.298391][T27029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2564.318010][T27029] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2564.326422][T27029] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2564.334387][T27029] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2564.342351][T27029] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2564.350316][T27029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2564.358281][T27029] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2564.366263][T27029] 19:23:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5600, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298fd) 19:23:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5700, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84fb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 34) 19:23:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x14e}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:15 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3300}, 0x0) [ 2564.669884][T27042] FAULT_INJECTION: forcing a failure. [ 2564.669884][T27042] name failslab, interval 1, probability 0, space 0, times 0 [ 2564.682812][T27042] CPU: 0 PID: 27042 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2564.691263][T27042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2564.701336][T27042] Call Trace: [ 2564.704630][T27042] [ 2564.707572][T27042] dump_stack_lvl+0xcd/0x134 [ 2564.712180][T27042] should_fail.cold+0x5/0xa [ 2564.716720][T27042] ? crypto_create_tfm_node+0x7f/0x320 [ 2564.722197][T27042] should_failslab+0x5/0x10 [ 2564.726736][T27042] __kmalloc_node+0x75/0x370 [ 2564.731357][T27042] crypto_create_tfm_node+0x7f/0x320 [ 2564.736676][T27042] crypto_spawn_tfm2+0x60/0xb0 [ 2564.741462][T27042] ? cryptd_hash_init_tfm+0x120/0x120 [ 2564.746870][T27042] cryptd_aead_init_tfm+0x3c/0x140 [ 2564.752010][T27042] ? cryptd_hash_init_tfm+0x120/0x120 [ 2564.757415][T27042] crypto_aead_init_tfm+0x138/0x1a0 [ 2564.762649][T27042] crypto_create_tfm_node+0x10d/0x320 [ 2564.768053][T27042] crypto_alloc_tfm_node+0x107/0x260 [ 2564.773402][T27042] cryptd_alloc_aead+0x101/0x200 [ 2564.778365][T27042] ? cryptd_alloc_ahash+0x200/0x200 [ 2564.783601][T27042] ? __kmalloc_node+0x62/0x370 [ 2564.788408][T27042] simd_aead_init+0x67/0x1b0 [ 2564.793019][T27042] ? simd_aead_exit+0x40/0x40 [ 2564.797750][T27042] crypto_aead_init_tfm+0x138/0x1a0 [ 2564.802980][T27042] crypto_create_tfm_node+0x10d/0x320 [ 2564.808379][T27042] crypto_alloc_tfm_node+0x107/0x260 [ 2564.813695][T27042] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2564.819460][T27042] tipc_crypto_key_init+0x82/0x110 [ 2564.824588][T27042] ? tipc_ehdr_validate+0x240/0x240 [ 2564.829805][T27042] ? crypto_mod_put+0x8c/0x100 [ 2564.834608][T27042] tipc_nl_node_set_key+0xa5d/0xf70 [ 2564.839848][T27042] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2564.846381][T27042] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2564.852648][T27042] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2564.860047][T27042] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2564.867368][T27042] genl_family_rcv_msg_doit+0x228/0x320 [ 2564.872945][T27042] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2564.880347][T27042] ? mutex_lock_io_nested+0x1150/0x1150 [ 2564.885941][T27042] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2564.892212][T27042] ? __radix_tree_lookup+0x211/0x2a0 [ 2564.897527][T27042] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2564.903796][T27042] ? genl_get_cmd+0x3cf/0x480 [ 2564.908507][T27042] genl_rcv_msg+0x328/0x580 [ 2564.913129][T27042] ? genl_get_cmd+0x480/0x480 [ 2564.917832][T27042] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2564.924362][T27042] ? lock_release+0x720/0x720 [ 2564.929059][T27042] ? check_path.constprop.0+0x50/0x50 [ 2564.934460][T27042] netlink_rcv_skb+0x153/0x420 [ 2564.939248][T27042] ? genl_get_cmd+0x480/0x480 [ 2564.943957][T27042] ? netlink_ack+0xa60/0xa60 [ 2564.948583][T27042] ? netlink_deliver_tap+0x1b1/0xc30 [ 2564.953894][T27042] ? _copy_from_iter+0x12b/0x1320 [ 2564.958960][T27042] genl_rcv+0x24/0x40 [ 2564.962964][T27042] netlink_unicast+0x533/0x7d0 [ 2564.967754][T27042] ? netlink_attachskb+0x880/0x880 [ 2564.972888][T27042] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2564.979162][T27042] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2564.985424][T27042] ? __phys_addr_symbol+0x2c/0x70 [ 2564.990467][T27042] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2564.996210][T27042] ? __check_object_size+0x16e/0x3f0 [ 2565.001522][T27042] netlink_sendmsg+0x86d/0xda0 [ 2565.006319][T27042] ? netlink_unicast+0x7d0/0x7d0 [ 2565.011289][T27042] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2565.017560][T27042] ? netlink_unicast+0x7d0/0x7d0 [ 2565.022520][T27042] sock_sendmsg+0xcf/0x120 [ 2565.026967][T27042] ____sys_sendmsg+0x6e8/0x810 [ 2565.031800][T27042] ? kernel_sendmsg+0x50/0x50 [ 2565.036504][T27042] ? do_recvmmsg+0x6d0/0x6d0 [ 2565.041123][T27042] ? perf_trace_lock+0xeb/0x4d0 [ 2565.045994][T27042] ? lock_chain_count+0x20/0x20 [ 2565.050874][T27042] ? check_path.constprop.0+0x50/0x50 [ 2565.056276][T27042] ___sys_sendmsg+0xf3/0x170 [ 2565.060886][T27042] ? sendmsg_copy_msghdr+0x160/0x160 [ 2565.066209][T27042] ? __fget_files+0x21b/0x3e0 [ 2565.070910][T27042] ? lock_downgrade+0x6e0/0x6e0 [ 2565.075807][T27042] ? __fget_files+0x23d/0x3e0 [ 2565.080516][T27042] ? __fget_light+0xea/0x280 [ 2565.085131][T27042] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2565.091409][T27042] __sys_sendmsg+0xe5/0x1b0 [ 2565.095937][T27042] ? __sys_sendmsg_sock+0x30/0x30 [ 2565.101001][T27042] ? syscall_enter_from_user_mode+0x21/0x70 [ 2565.106929][T27042] do_syscall_64+0x35/0xb0 [ 2565.111368][T27042] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2565.117278][T27042] RIP: 0033:0x7f2d0d66eae9 [ 2565.121706][T27042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2565.141340][T27042] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2565.149777][T27042] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2565.157768][T27042] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 19:23:16 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3400}, 0x0) 19:23:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298fe) [ 2565.165773][T27042] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2565.173760][T27042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2565.181745][T27042] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2565.189763][T27042] 19:23:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5800, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 35) 19:23:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5900, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2565.305715][T27063] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2565.323897][T27063] device 1202 entered promiscuous mode [ 2565.351803][T27067] FAULT_INJECTION: forcing a failure. [ 2565.351803][T27067] name failslab, interval 1, probability 0, space 0, times 0 [ 2565.364521][T27067] CPU: 0 PID: 27067 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2565.372959][T27067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2565.383034][T27067] Call Trace: [ 2565.386327][T27067] [ 2565.389284][T27067] dump_stack_lvl+0xcd/0x134 [ 2565.393905][T27067] should_fail.cold+0x5/0xa [ 2565.398436][T27067] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2565.404352][T27067] should_failslab+0x5/0x10 [ 2565.408887][T27067] kmem_cache_alloc_trace+0x55/0x2b0 [ 2565.414202][T27067] ? crypto_aead_setkey+0x10f/0x290 [ 2565.419460][T27067] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2565.425225][T27067] tipc_crypto_key_init+0x82/0x110 [ 2565.430372][T27067] ? tipc_ehdr_validate+0x240/0x240 [ 2565.435590][T27067] ? crypto_mod_put+0x8c/0x100 [ 2565.440385][T27067] tipc_nl_node_set_key+0xa5d/0xf70 [ 2565.445703][T27067] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2565.451979][T27067] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2565.458247][T27067] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2565.465645][T27067] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2565.472970][T27067] genl_family_rcv_msg_doit+0x228/0x320 [ 2565.478548][T27067] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2565.486061][T27067] ? mutex_lock_io_nested+0x1150/0x1150 [ 2565.491647][T27067] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2565.497918][T27067] ? __radix_tree_lookup+0x211/0x2a0 [ 2565.503226][T27067] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2565.509491][T27067] ? genl_get_cmd+0x3cf/0x480 [ 2565.514194][T27067] genl_rcv_msg+0x328/0x580 [ 2565.518725][T27067] ? genl_get_cmd+0x480/0x480 [ 2565.523429][T27067] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2565.529701][T27067] ? lock_release+0x720/0x720 [ 2565.534403][T27067] ? check_path.constprop.0+0x50/0x50 [ 2565.539804][T27067] netlink_rcv_skb+0x153/0x420 [ 2565.544592][T27067] ? genl_get_cmd+0x480/0x480 [ 2565.549297][T27067] ? netlink_ack+0xa60/0xa60 [ 2565.553925][T27067] ? netlink_deliver_tap+0x1b1/0xc30 [ 2565.559232][T27067] ? _copy_from_iter+0x12b/0x1320 [ 2565.564286][T27067] genl_rcv+0x24/0x40 [ 2565.568293][T27067] netlink_unicast+0x533/0x7d0 [ 2565.573087][T27067] ? netlink_attachskb+0x880/0x880 [ 2565.578222][T27067] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2565.584489][T27067] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2565.590756][T27067] ? __phys_addr_symbol+0x2c/0x70 [ 2565.595797][T27067] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2565.601542][T27067] ? __check_object_size+0x16e/0x3f0 [ 2565.606857][T27067] netlink_sendmsg+0x86d/0xda0 [ 2565.611655][T27067] ? netlink_unicast+0x7d0/0x7d0 [ 2565.616629][T27067] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2565.622899][T27067] ? netlink_unicast+0x7d0/0x7d0 [ 2565.627865][T27067] sock_sendmsg+0xcf/0x120 [ 2565.632317][T27067] ____sys_sendmsg+0x6e8/0x810 [ 2565.637113][T27067] ? kernel_sendmsg+0x50/0x50 [ 2565.641816][T27067] ? do_recvmmsg+0x6d0/0x6d0 [ 2565.646430][T27067] ? perf_trace_lock+0xeb/0x4d0 [ 2565.651305][T27067] ? lock_chain_count+0x20/0x20 [ 2565.656185][T27067] ? check_path.constprop.0+0x50/0x50 [ 2565.661582][T27067] ___sys_sendmsg+0xf3/0x170 [ 2565.666234][T27067] ? sendmsg_copy_msghdr+0x160/0x160 [ 2565.671565][T27067] ? __fget_files+0x21b/0x3e0 [ 2565.676271][T27067] ? lock_downgrade+0x6e0/0x6e0 [ 2565.681165][T27067] ? __fget_files+0x23d/0x3e0 [ 2565.685876][T27067] ? __fget_light+0xea/0x280 [ 2565.690494][T27067] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2565.696776][T27067] __sys_sendmsg+0xe5/0x1b0 [ 2565.701297][T27067] ? __sys_sendmsg_sock+0x30/0x30 [ 2565.706357][T27067] ? syscall_enter_from_user_mode+0x21/0x70 [ 2565.712277][T27067] do_syscall_64+0x35/0xb0 [ 2565.716717][T27067] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2565.722629][T27067] RIP: 0033:0x7f2d0d66eae9 [ 2565.727059][T27067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:23:17 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x298ff) 19:23:17 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3500}, 0x0) 19:23:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84fc}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x176}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2565.746687][T27067] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2565.755124][T27067] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2565.763111][T27067] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2565.771099][T27067] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2565.779120][T27067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2565.787105][T27067] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2565.795117][T27067] 19:23:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5a00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 36) [ 2565.957728][T27091] FAULT_INJECTION: forcing a failure. [ 2565.957728][T27091] name failslab, interval 1, probability 0, space 0, times 0 [ 2565.970545][T27091] CPU: 0 PID: 27091 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2565.978981][T27091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2565.989238][T27091] Call Trace: [ 2565.992528][T27091] [ 2565.995471][T27091] dump_stack_lvl+0xcd/0x134 [ 2566.000089][T27091] should_fail.cold+0x5/0xa [ 2566.004620][T27091] ? crypto_create_tfm_node+0x7f/0x320 [ 2566.010101][T27091] should_failslab+0x5/0x10 [ 2566.014628][T27091] __kmalloc_node+0x75/0x370 [ 2566.019246][T27091] crypto_create_tfm_node+0x7f/0x320 [ 2566.024559][T27091] crypto_alloc_tfm_node+0x107/0x260 [ 2566.029886][T27091] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2566.035652][T27091] tipc_crypto_key_init+0x82/0x110 [ 2566.040787][T27091] ? tipc_ehdr_validate+0x240/0x240 [ 2566.046003][T27091] ? crypto_mod_put+0x8c/0x100 [ 2566.050808][T27091] tipc_nl_node_set_key+0xa5d/0xf70 [ 2566.056040][T27091] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2566.062307][T27091] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2566.068581][T27091] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2566.075983][T27091] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2566.083306][T27091] genl_family_rcv_msg_doit+0x228/0x320 [ 2566.088889][T27091] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2566.096290][T27091] ? mutex_lock_io_nested+0x1150/0x1150 [ 2566.101876][T27091] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2566.108142][T27091] ? __radix_tree_lookup+0x211/0x2a0 [ 2566.113447][T27091] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2566.119715][T27091] ? genl_get_cmd+0x3cf/0x480 [ 2566.124424][T27091] genl_rcv_msg+0x328/0x580 [ 2566.128958][T27091] ? genl_get_cmd+0x480/0x480 [ 2566.133662][T27091] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2566.139936][T27091] ? lock_release+0x720/0x720 [ 2566.144632][T27091] ? check_path.constprop.0+0x50/0x50 [ 2566.150151][T27091] netlink_rcv_skb+0x153/0x420 [ 2566.154942][T27091] ? genl_get_cmd+0x480/0x480 [ 2566.159645][T27091] ? netlink_ack+0xa60/0xa60 [ 2566.164268][T27091] ? netlink_deliver_tap+0x1b1/0xc30 [ 2566.169581][T27091] ? _copy_from_iter+0x12b/0x1320 [ 2566.174638][T27091] genl_rcv+0x24/0x40 [ 2566.178644][T27091] netlink_unicast+0x533/0x7d0 [ 2566.183445][T27091] ? netlink_attachskb+0x880/0x880 [ 2566.188578][T27091] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2566.194843][T27091] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2566.201105][T27091] ? __phys_addr_symbol+0x2c/0x70 [ 2566.206151][T27091] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2566.211897][T27091] ? __check_object_size+0x16e/0x3f0 [ 2566.217248][T27091] netlink_sendmsg+0x86d/0xda0 [ 2566.222056][T27091] ? netlink_unicast+0x7d0/0x7d0 [ 2566.227117][T27091] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2566.233389][T27091] ? netlink_unicast+0x7d0/0x7d0 [ 2566.238353][T27091] sock_sendmsg+0xcf/0x120 [ 2566.242900][T27091] ____sys_sendmsg+0x6e8/0x810 [ 2566.247698][T27091] ? kernel_sendmsg+0x50/0x50 [ 2566.252410][T27091] ? do_recvmmsg+0x6d0/0x6d0 [ 2566.257028][T27091] ? perf_trace_lock+0xeb/0x4d0 [ 2566.261894][T27091] ? lock_chain_count+0x20/0x20 [ 2566.266781][T27091] ? check_path.constprop.0+0x50/0x50 [ 2566.272185][T27091] ___sys_sendmsg+0xf3/0x170 [ 2566.276802][T27091] ? sendmsg_copy_msghdr+0x160/0x160 [ 2566.282117][T27091] ? __fget_files+0x21b/0x3e0 [ 2566.286823][T27091] ? lock_downgrade+0x6e0/0x6e0 [ 2566.291712][T27091] ? __fget_files+0x23d/0x3e0 [ 2566.296420][T27091] ? __fget_light+0xea/0x280 [ 2566.301029][T27091] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2566.307301][T27091] __sys_sendmsg+0xe5/0x1b0 [ 2566.311824][T27091] ? __sys_sendmsg_sock+0x30/0x30 [ 2566.316889][T27091] ? syscall_enter_from_user_mode+0x21/0x70 [ 2566.322814][T27091] do_syscall_64+0x35/0xb0 [ 2566.327258][T27091] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2566.333173][T27091] RIP: 0033:0x7f2d0d66eae9 [ 2566.337605][T27091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:23:17 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3600}, 0x0) 19:23:17 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x29900) 19:23:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x19e}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84fd}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5b00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2566.357239][T27091] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2566.365709][T27091] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2566.373698][T27091] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2566.381681][T27091] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2566.389677][T27091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2566.397662][T27091] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2566.405669][T27091] 19:23:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5c00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 37) [ 2566.528338][T27106] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2566.546135][T27106] device 1203 entered promiscuous mode 19:23:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5d00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2566.604021][T27115] FAULT_INJECTION: forcing a failure. [ 2566.604021][T27115] name failslab, interval 1, probability 0, space 0, times 0 [ 2566.616828][T27115] CPU: 0 PID: 27115 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2566.625269][T27115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2566.635344][T27115] Call Trace: [ 2566.638636][T27115] [ 2566.641577][T27115] dump_stack_lvl+0xcd/0x134 [ 2566.646196][T27115] should_fail.cold+0x5/0xa [ 2566.650743][T27115] ? crypto_create_tfm_node+0x7f/0x320 [ 2566.656228][T27115] should_failslab+0x5/0x10 [ 2566.660756][T27115] __kmalloc_node+0x75/0x370 [ 2566.665378][T27115] crypto_create_tfm_node+0x7f/0x320 [ 2566.670778][T27115] crypto_alloc_tfm_node+0x107/0x260 [ 2566.676098][T27115] cryptd_alloc_aead+0x101/0x200 [ 2566.681065][T27115] ? cryptd_alloc_ahash+0x200/0x200 [ 2566.686307][T27115] ? __kmalloc_node+0x62/0x370 [ 2566.691111][T27115] simd_aead_init+0x67/0x1b0 [ 2566.695721][T27115] ? simd_aead_exit+0x40/0x40 [ 2566.700425][T27115] crypto_aead_init_tfm+0x138/0x1a0 [ 2566.705655][T27115] crypto_create_tfm_node+0x10d/0x320 [ 2566.711063][T27115] crypto_alloc_tfm_node+0x107/0x260 [ 2566.716376][T27115] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2566.722134][T27115] tipc_crypto_key_init+0x82/0x110 [ 2566.727271][T27115] ? tipc_ehdr_validate+0x240/0x240 [ 2566.732488][T27115] ? crypto_mod_put+0x8c/0x100 [ 2566.737290][T27115] tipc_nl_node_set_key+0xa5d/0xf70 [ 2566.742523][T27115] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2566.748802][T27115] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2566.755072][T27115] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2566.762479][T27115] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2566.769799][T27115] genl_family_rcv_msg_doit+0x228/0x320 [ 2566.775377][T27115] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2566.782780][T27115] ? mutex_lock_io_nested+0x1150/0x1150 [ 2566.788357][T27115] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2566.794608][T27115] ? __radix_tree_lookup+0x211/0x2a0 [ 2566.799918][T27115] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2566.806189][T27115] ? genl_get_cmd+0x3cf/0x480 [ 2566.810896][T27115] genl_rcv_msg+0x328/0x580 [ 2566.815425][T27115] ? genl_get_cmd+0x480/0x480 [ 2566.820127][T27115] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2566.826400][T27115] ? lock_release+0x720/0x720 [ 2566.831098][T27115] ? check_path.constprop.0+0x50/0x50 [ 2566.836500][T27115] netlink_rcv_skb+0x153/0x420 [ 2566.841284][T27115] ? genl_get_cmd+0x480/0x480 [ 2566.845989][T27115] ? netlink_ack+0xa60/0xa60 [ 2566.850615][T27115] ? netlink_deliver_tap+0x1b1/0xc30 [ 2566.855929][T27115] ? _copy_from_iter+0x12b/0x1320 [ 2566.860995][T27115] genl_rcv+0x24/0x40 [ 2566.864999][T27115] netlink_unicast+0x533/0x7d0 [ 2566.869791][T27115] ? netlink_attachskb+0x880/0x880 [ 2566.874924][T27115] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2566.881190][T27115] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2566.887457][T27115] ? __phys_addr_symbol+0x2c/0x70 [ 2566.892501][T27115] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2566.898244][T27115] ? __check_object_size+0x16e/0x3f0 [ 2566.903553][T27115] netlink_sendmsg+0x86d/0xda0 [ 2566.908351][T27115] ? netlink_unicast+0x7d0/0x7d0 [ 2566.913324][T27115] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2566.919591][T27115] ? netlink_unicast+0x7d0/0x7d0 [ 2566.924558][T27115] sock_sendmsg+0xcf/0x120 [ 2566.929000][T27115] ____sys_sendmsg+0x6e8/0x810 [ 2566.933794][T27115] ? kernel_sendmsg+0x50/0x50 [ 2566.938493][T27115] ? do_recvmmsg+0x6d0/0x6d0 [ 2566.943100][T27115] ? perf_trace_lock+0xeb/0x4d0 [ 2566.947965][T27115] ? lock_chain_count+0x20/0x20 [ 2566.952846][T27115] ? check_path.constprop.0+0x50/0x50 [ 2566.958253][T27115] ___sys_sendmsg+0xf3/0x170 [ 2566.962868][T27115] ? sendmsg_copy_msghdr+0x160/0x160 [ 2566.968177][T27115] ? __fget_files+0x21b/0x3e0 [ 2566.972883][T27115] ? lock_downgrade+0x6e0/0x6e0 [ 2566.977779][T27115] ? __fget_files+0x23d/0x3e0 [ 2566.982491][T27115] ? __fget_light+0xea/0x280 [ 2566.987104][T27115] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2566.993376][T27115] __sys_sendmsg+0xe5/0x1b0 [ 2566.997898][T27115] ? __sys_sendmsg_sock+0x30/0x30 [ 2567.002962][T27115] ? syscall_enter_from_user_mode+0x21/0x70 [ 2567.008879][T27115] do_syscall_64+0x35/0xb0 [ 2567.013321][T27115] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2567.019237][T27115] RIP: 0033:0x7f2d0d66eae9 [ 2567.023664][T27115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2567.043292][T27115] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:23:18 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x29901) 19:23:18 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3700}, 0x0) 19:23:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84fe}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2567.051726][T27115] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2567.059716][T27115] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2567.067705][T27115] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2567.075688][T27115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2567.083690][T27115] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2567.091693][T27115] 19:23:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5e00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 38) 19:23:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5f00, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2567.268686][T27136] FAULT_INJECTION: forcing a failure. [ 2567.268686][T27136] name failslab, interval 1, probability 0, space 0, times 0 [ 2567.281606][T27136] CPU: 0 PID: 27136 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2567.290051][T27136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2567.300121][T27136] Call Trace: [ 2567.303412][T27136] [ 2567.306350][T27136] dump_stack_lvl+0xcd/0x134 [ 2567.310966][T27136] should_fail.cold+0x5/0xa [ 2567.315506][T27136] ? crypto_create_tfm_node+0x7f/0x320 [ 2567.321071][T27136] should_failslab+0x5/0x10 [ 2567.325579][T27136] __kmalloc_node+0x75/0x370 [ 2567.330183][T27136] crypto_create_tfm_node+0x7f/0x320 [ 2567.335474][T27136] crypto_spawn_tfm2+0x60/0xb0 [ 2567.340237][T27136] ? cryptd_hash_init_tfm+0x120/0x120 [ 2567.345620][T27136] cryptd_aead_init_tfm+0x3c/0x140 [ 2567.350734][T27136] ? cryptd_hash_init_tfm+0x120/0x120 [ 2567.356107][T27136] crypto_aead_init_tfm+0x138/0x1a0 [ 2567.361310][T27136] crypto_create_tfm_node+0x10d/0x320 [ 2567.366682][T27136] crypto_alloc_tfm_node+0x107/0x260 [ 2567.371975][T27136] cryptd_alloc_aead+0x101/0x200 [ 2567.376922][T27136] ? cryptd_alloc_ahash+0x200/0x200 [ 2567.382135][T27136] ? __kmalloc_node+0x62/0x370 [ 2567.386930][T27136] simd_aead_init+0x67/0x1b0 [ 2567.391522][T27136] ? simd_aead_exit+0x40/0x40 [ 2567.396198][T27136] crypto_aead_init_tfm+0x138/0x1a0 [ 2567.401402][T27136] crypto_create_tfm_node+0x10d/0x320 [ 2567.406776][T27136] crypto_alloc_tfm_node+0x107/0x260 [ 2567.412067][T27136] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2567.417804][T27136] tipc_crypto_key_init+0x82/0x110 [ 2567.422929][T27136] ? tipc_ehdr_validate+0x240/0x240 [ 2567.428126][T27136] ? crypto_mod_put+0x8c/0x100 [ 2567.432905][T27136] tipc_nl_node_set_key+0xa5d/0xf70 [ 2567.438121][T27136] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2567.444370][T27136] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2567.450630][T27136] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2567.458003][T27136] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2567.465298][T27136] genl_family_rcv_msg_doit+0x228/0x320 [ 2567.470863][T27136] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2567.478236][T27136] ? mutex_lock_io_nested+0x1150/0x1150 [ 2567.483790][T27136] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2567.490033][T27136] ? __radix_tree_lookup+0x211/0x2a0 [ 2567.495318][T27136] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2567.501559][T27136] ? genl_get_cmd+0x3cf/0x480 [ 2567.506246][T27136] genl_rcv_msg+0x328/0x580 [ 2567.510755][T27136] ? genl_get_cmd+0x480/0x480 [ 2567.515432][T27136] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2567.521691][T27136] ? lock_release+0x720/0x720 [ 2567.526368][T27136] ? check_path.constprop.0+0x50/0x50 [ 2567.531752][T27136] netlink_rcv_skb+0x153/0x420 [ 2567.536519][T27136] ? genl_get_cmd+0x480/0x480 [ 2567.541199][T27136] ? netlink_ack+0xa60/0xa60 [ 2567.545795][T27136] ? netlink_deliver_tap+0x1b1/0xc30 [ 2567.551090][T27136] ? _copy_from_iter+0x12b/0x1320 [ 2567.556122][T27136] genl_rcv+0x24/0x40 [ 2567.560112][T27136] netlink_unicast+0x533/0x7d0 [ 2567.564883][T27136] ? netlink_attachskb+0x880/0x880 [ 2567.570005][T27136] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2567.576249][T27136] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2567.582487][T27136] ? __phys_addr_symbol+0x2c/0x70 [ 2567.587510][T27136] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2567.593228][T27136] ? __check_object_size+0x16e/0x3f0 [ 2567.598519][T27136] netlink_sendmsg+0x86d/0xda0 [ 2567.603291][T27136] ? netlink_unicast+0x7d0/0x7d0 [ 2567.608234][T27136] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2567.614476][T27136] ? netlink_unicast+0x7d0/0x7d0 [ 2567.619411][T27136] sock_sendmsg+0xcf/0x120 [ 2567.623834][T27136] ____sys_sendmsg+0x6e8/0x810 [ 2567.628616][T27136] ? kernel_sendmsg+0x50/0x50 [ 2567.633292][T27136] ? do_recvmmsg+0x6d0/0x6d0 [ 2567.637883][T27136] ? perf_trace_lock+0xeb/0x4d0 [ 2567.642744][T27136] ? lock_chain_count+0x20/0x20 [ 2567.647603][T27136] ? check_path.constprop.0+0x50/0x50 [ 2567.653100][T27136] ___sys_sendmsg+0xf3/0x170 [ 2567.657711][T27136] ? sendmsg_copy_msghdr+0x160/0x160 [ 2567.663001][T27136] ? __fget_files+0x21b/0x3e0 [ 2567.667677][T27136] ? lock_downgrade+0x6e0/0x6e0 [ 2567.672547][T27136] ? __fget_files+0x23d/0x3e0 [ 2567.677233][T27136] ? __fget_light+0xea/0x280 [ 2567.681829][T27136] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2567.688078][T27136] __sys_sendmsg+0xe5/0x1b0 [ 2567.692582][T27136] ? __sys_sendmsg_sock+0x30/0x30 [ 2567.697633][T27136] ? syscall_enter_from_user_mode+0x21/0x70 [ 2567.703531][T27136] do_syscall_64+0x35/0xb0 [ 2567.707952][T27136] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2567.713858][T27136] RIP: 0033:0x7f2d0d66eae9 [ 2567.718271][T27136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2567.737880][T27136] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2567.746304][T27136] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2567.754278][T27136] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2567.762257][T27136] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2567.770234][T27136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2567.778280][T27136] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2567.786282][T27136] 19:23:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x6000, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 39) 19:23:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x224}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84ff}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x6100, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2567.975290][T27147] FAULT_INJECTION: forcing a failure. [ 2567.975290][T27147] name failslab, interval 1, probability 0, space 0, times 0 [ 2567.988302][T27147] CPU: 0 PID: 27147 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2567.997004][T27147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2568.007078][T27147] Call Trace: [ 2568.010371][T27147] [ 2568.013314][T27147] dump_stack_lvl+0xcd/0x134 [ 2568.017926][T27147] should_fail.cold+0x5/0xa [ 2568.022463][T27147] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2568.028375][T27147] should_failslab+0x5/0x10 [ 2568.032897][T27147] kmem_cache_alloc_trace+0x55/0x2b0 [ 2568.038204][T27147] ? crypto_aead_setkey+0x10f/0x290 [ 2568.043435][T27147] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2568.049190][T27147] tipc_crypto_key_init+0x82/0x110 [ 2568.054327][T27147] ? tipc_ehdr_validate+0x240/0x240 [ 2568.059548][T27147] ? crypto_mod_put+0x8c/0x100 [ 2568.064353][T27147] tipc_nl_node_set_key+0xa5d/0xf70 [ 2568.069590][T27147] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2568.075953][T27147] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2568.082222][T27147] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2568.089636][T27147] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2568.096962][T27147] genl_family_rcv_msg_doit+0x228/0x320 [ 2568.102537][T27147] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2568.109943][T27147] ? mutex_lock_io_nested+0x1150/0x1150 [ 2568.115528][T27147] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2568.121801][T27147] ? __radix_tree_lookup+0x211/0x2a0 [ 2568.127106][T27147] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2568.133369][T27147] ? genl_get_cmd+0x3cf/0x480 [ 2568.138076][T27147] genl_rcv_msg+0x328/0x580 [ 2568.142606][T27147] ? genl_get_cmd+0x480/0x480 [ 2568.147302][T27147] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2568.153578][T27147] ? lock_release+0x720/0x720 [ 2568.158280][T27147] ? check_path.constprop.0+0x50/0x50 [ 2568.163680][T27147] netlink_rcv_skb+0x153/0x420 [ 2568.168470][T27147] ? genl_get_cmd+0x480/0x480 [ 2568.173177][T27147] ? netlink_ack+0xa60/0xa60 [ 2568.177798][T27147] ? netlink_deliver_tap+0x1b1/0xc30 [ 2568.183102][T27147] ? _copy_from_iter+0x12b/0x1320 [ 2568.188159][T27147] genl_rcv+0x24/0x40 [ 2568.192162][T27147] netlink_unicast+0x533/0x7d0 [ 2568.196956][T27147] ? netlink_attachskb+0x880/0x880 [ 2568.202086][T27147] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2568.208353][T27147] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2568.214617][T27147] ? __phys_addr_symbol+0x2c/0x70 [ 2568.219665][T27147] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2568.225411][T27147] ? __check_object_size+0x16e/0x3f0 [ 2568.230726][T27147] netlink_sendmsg+0x86d/0xda0 [ 2568.235523][T27147] ? netlink_unicast+0x7d0/0x7d0 [ 2568.240497][T27147] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2568.246768][T27147] ? netlink_unicast+0x7d0/0x7d0 [ 2568.251727][T27147] sock_sendmsg+0xcf/0x120 [ 2568.256177][T27147] ____sys_sendmsg+0x6e8/0x810 [ 2568.260966][T27147] ? kernel_sendmsg+0x50/0x50 [ 2568.265668][T27147] ? do_recvmmsg+0x6d0/0x6d0 [ 2568.270281][T27147] ? perf_trace_lock+0xeb/0x4d0 [ 2568.275152][T27147] ? lock_chain_count+0x20/0x20 [ 2568.280032][T27147] ? check_path.constprop.0+0x50/0x50 [ 2568.285427][T27147] ___sys_sendmsg+0xf3/0x170 [ 2568.290038][T27147] ? sendmsg_copy_msghdr+0x160/0x160 [ 2568.295349][T27147] ? __fget_files+0x21b/0x3e0 [ 2568.300050][T27147] ? lock_downgrade+0x6e0/0x6e0 [ 2568.304938][T27147] ? __fget_files+0x23d/0x3e0 [ 2568.309646][T27147] ? __fget_light+0xea/0x280 [ 2568.314260][T27147] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2568.320534][T27147] __sys_sendmsg+0xe5/0x1b0 [ 2568.325085][T27147] ? __sys_sendmsg_sock+0x30/0x30 [ 2568.330148][T27147] ? syscall_enter_from_user_mode+0x21/0x70 [ 2568.336066][T27147] do_syscall_64+0x35/0xb0 [ 2568.340505][T27147] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2568.346428][T27147] RIP: 0033:0x7f2d0d66eae9 [ 2568.350854][T27147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:23:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x29902) 19:23:19 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3800}, 0x0) [ 2568.370478][T27147] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2568.378911][T27147] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2568.386899][T27147] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2568.394886][T27147] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2568.402876][T27147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2568.410862][T27147] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2568.418869][T27147] 19:23:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x6200, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 40) [ 2568.550553][T27158] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2568.568723][T27158] device 1204 entered promiscuous mode 19:23:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x6300, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2568.662491][T27172] FAULT_INJECTION: forcing a failure. [ 2568.662491][T27172] name failslab, interval 1, probability 0, space 0, times 0 [ 2568.675441][T27172] CPU: 0 PID: 27172 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2568.683881][T27172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2568.693953][T27172] Call Trace: [ 2568.697247][T27172] [ 2568.700186][T27172] dump_stack_lvl+0xcd/0x134 [ 2568.704802][T27172] should_fail.cold+0x5/0xa [ 2568.709341][T27172] ? crypto_create_tfm_node+0x7f/0x320 [ 2568.714828][T27172] should_failslab+0x5/0x10 [ 2568.719372][T27172] __kmalloc_node+0x75/0x370 [ 2568.723997][T27172] crypto_create_tfm_node+0x7f/0x320 [ 2568.729319][T27172] crypto_alloc_tfm_node+0x107/0x260 [ 2568.734633][T27172] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2568.740394][T27172] tipc_crypto_key_init+0x82/0x110 [ 2568.745531][T27172] ? tipc_ehdr_validate+0x240/0x240 [ 2568.750752][T27172] ? crypto_mod_put+0x8c/0x100 [ 2568.755557][T27172] tipc_nl_node_set_key+0xa5d/0xf70 [ 2568.760791][T27172] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2568.767067][T27172] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2568.773334][T27172] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2568.780735][T27172] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2568.788056][T27172] genl_family_rcv_msg_doit+0x228/0x320 [ 2568.793633][T27172] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2568.801035][T27172] ? mutex_lock_io_nested+0x1150/0x1150 [ 2568.806637][T27172] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2568.812911][T27172] ? __radix_tree_lookup+0x211/0x2a0 [ 2568.818225][T27172] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2568.824490][T27172] ? genl_get_cmd+0x3cf/0x480 [ 2568.829202][T27172] genl_rcv_msg+0x328/0x580 [ 2568.833736][T27172] ? genl_get_cmd+0x480/0x480 [ 2568.838456][T27172] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2568.844727][T27172] ? lock_release+0x720/0x720 [ 2568.849431][T27172] ? check_path.constprop.0+0x50/0x50 [ 2568.854838][T27172] netlink_rcv_skb+0x153/0x420 [ 2568.859631][T27172] ? genl_get_cmd+0x480/0x480 [ 2568.864334][T27172] ? netlink_ack+0xa60/0xa60 [ 2568.868958][T27172] ? netlink_deliver_tap+0x1b1/0xc30 [ 2568.874272][T27172] ? _copy_from_iter+0x12b/0x1320 [ 2568.879333][T27172] genl_rcv+0x24/0x40 [ 2568.883338][T27172] netlink_unicast+0x533/0x7d0 [ 2568.888135][T27172] ? netlink_attachskb+0x880/0x880 [ 2568.893273][T27172] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2568.899535][T27172] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2568.905800][T27172] ? __phys_addr_symbol+0x2c/0x70 [ 2568.910856][T27172] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2568.916599][T27172] ? __check_object_size+0x16e/0x3f0 [ 2568.921910][T27172] netlink_sendmsg+0x86d/0xda0 [ 2568.926704][T27172] ? netlink_unicast+0x7d0/0x7d0 [ 2568.931673][T27172] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2568.938029][T27172] ? netlink_unicast+0x7d0/0x7d0 [ 2568.942992][T27172] sock_sendmsg+0xcf/0x120 [ 2568.947440][T27172] ____sys_sendmsg+0x6e8/0x810 [ 2568.952229][T27172] ? kernel_sendmsg+0x50/0x50 [ 2568.956930][T27172] ? do_recvmmsg+0x6d0/0x6d0 [ 2568.961541][T27172] ? perf_trace_lock+0xeb/0x4d0 [ 2568.966408][T27172] ? lock_chain_count+0x20/0x20 [ 2568.971283][T27172] ? check_path.constprop.0+0x50/0x50 [ 2568.976684][T27172] ___sys_sendmsg+0xf3/0x170 [ 2568.981293][T27172] ? sendmsg_copy_msghdr+0x160/0x160 [ 2568.986609][T27172] ? __fget_files+0x21b/0x3e0 [ 2568.991310][T27172] ? lock_downgrade+0x6e0/0x6e0 [ 2568.996200][T27172] ? __fget_files+0x23d/0x3e0 [ 2569.000911][T27172] ? __fget_light+0xea/0x280 [ 2569.005523][T27172] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2569.011795][T27172] __sys_sendmsg+0xe5/0x1b0 [ 2569.016320][T27172] ? __sys_sendmsg_sock+0x30/0x30 [ 2569.021388][T27172] ? syscall_enter_from_user_mode+0x21/0x70 [ 2569.027310][T27172] do_syscall_64+0x35/0xb0 [ 2569.031749][T27172] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2569.037665][T27172] RIP: 0033:0x7f2d0d66eae9 [ 2569.042095][T27172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:23:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x29903) 19:23:20 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3900}, 0x0) 19:23:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb8500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2569.061721][T27172] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2569.070157][T27172] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2569.078147][T27172] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2569.086136][T27172] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2569.094122][T27172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2569.102110][T27172] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2569.110115][T27172] 19:23:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x6400, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 41) 19:23:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x6500, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2569.294072][T27193] FAULT_INJECTION: forcing a failure. [ 2569.294072][T27193] name failslab, interval 1, probability 0, space 0, times 0 [ 2569.306831][T27193] CPU: 0 PID: 27193 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2569.315268][T27193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2569.325337][T27193] Call Trace: [ 2569.328632][T27193] [ 2569.331576][T27193] dump_stack_lvl+0xcd/0x134 [ 2569.336190][T27193] should_fail.cold+0x5/0xa [ 2569.340723][T27193] ? crypto_create_tfm_node+0x7f/0x320 [ 2569.346203][T27193] should_failslab+0x5/0x10 [ 2569.350729][T27193] __kmalloc_node+0x75/0x370 [ 2569.355352][T27193] crypto_create_tfm_node+0x7f/0x320 [ 2569.360666][T27193] crypto_alloc_tfm_node+0x107/0x260 [ 2569.365980][T27193] cryptd_alloc_aead+0x101/0x200 [ 2569.371244][T27193] ? cryptd_alloc_ahash+0x200/0x200 [ 2569.376475][T27193] ? __kmalloc_node+0x62/0x370 [ 2569.381280][T27193] simd_aead_init+0x67/0x1b0 [ 2569.385892][T27193] ? simd_aead_exit+0x40/0x40 [ 2569.390593][T27193] crypto_aead_init_tfm+0x138/0x1a0 [ 2569.395816][T27193] crypto_create_tfm_node+0x10d/0x320 [ 2569.401215][T27193] crypto_alloc_tfm_node+0x107/0x260 [ 2569.406533][T27193] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2569.412290][T27193] tipc_crypto_key_init+0x82/0x110 [ 2569.417424][T27193] ? tipc_ehdr_validate+0x240/0x240 [ 2569.422644][T27193] ? crypto_mod_put+0x8c/0x100 [ 2569.427446][T27193] tipc_nl_node_set_key+0xa5d/0xf70 [ 2569.432672][T27193] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2569.438945][T27193] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2569.445216][T27193] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2569.452610][T27193] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2569.459933][T27193] genl_family_rcv_msg_doit+0x228/0x320 [ 2569.465519][T27193] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2569.472916][T27193] ? mutex_lock_io_nested+0x1150/0x1150 [ 2569.478502][T27193] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2569.484769][T27193] ? __radix_tree_lookup+0x211/0x2a0 [ 2569.490075][T27193] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2569.496341][T27193] ? genl_get_cmd+0x3cf/0x480 [ 2569.501047][T27193] genl_rcv_msg+0x328/0x580 [ 2569.505583][T27193] ? genl_get_cmd+0x480/0x480 [ 2569.510286][T27193] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2569.516565][T27193] ? lock_release+0x720/0x720 [ 2569.521262][T27193] ? check_path.constprop.0+0x50/0x50 [ 2569.526657][T27193] netlink_rcv_skb+0x153/0x420 [ 2569.531447][T27193] ? genl_get_cmd+0x480/0x480 [ 2569.536148][T27193] ? netlink_ack+0xa60/0xa60 [ 2569.540767][T27193] ? netlink_deliver_tap+0x1b1/0xc30 [ 2569.546074][T27193] ? _copy_from_iter+0x12b/0x1320 [ 2569.551129][T27193] genl_rcv+0x24/0x40 [ 2569.555134][T27193] netlink_unicast+0x533/0x7d0 [ 2569.559929][T27193] ? netlink_attachskb+0x880/0x880 [ 2569.565060][T27193] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2569.571326][T27193] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2569.577594][T27193] ? __phys_addr_symbol+0x2c/0x70 [ 2569.582642][T27193] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2569.588385][T27193] ? __check_object_size+0x16e/0x3f0 [ 2569.593718][T27193] netlink_sendmsg+0x86d/0xda0 [ 2569.598517][T27193] ? netlink_unicast+0x7d0/0x7d0 [ 2569.603490][T27193] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2569.609757][T27193] ? netlink_unicast+0x7d0/0x7d0 [ 2569.614717][T27193] sock_sendmsg+0xcf/0x120 [ 2569.619162][T27193] ____sys_sendmsg+0x6e8/0x810 [ 2569.623951][T27193] ? kernel_sendmsg+0x50/0x50 [ 2569.628653][T27193] ? do_recvmmsg+0x6d0/0x6d0 [ 2569.633269][T27193] ? perf_trace_lock+0xeb/0x4d0 [ 2569.638145][T27193] ? lock_chain_count+0x20/0x20 [ 2569.643043][T27193] ? check_path.constprop.0+0x50/0x50 [ 2569.648461][T27193] ___sys_sendmsg+0xf3/0x170 [ 2569.653078][T27193] ? sendmsg_copy_msghdr+0x160/0x160 [ 2569.658398][T27193] ? __fget_files+0x21b/0x3e0 [ 2569.663104][T27193] ? lock_downgrade+0x6e0/0x6e0 [ 2569.667996][T27193] ? __fget_files+0x23d/0x3e0 [ 2569.672711][T27193] ? __fget_light+0xea/0x280 [ 2569.677326][T27193] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2569.683599][T27193] __sys_sendmsg+0xe5/0x1b0 [ 2569.688124][T27193] ? __sys_sendmsg_sock+0x30/0x30 [ 2569.693182][T27193] ? syscall_enter_from_user_mode+0x21/0x70 [ 2569.699099][T27193] do_syscall_64+0x35/0xb0 [ 2569.703541][T27193] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2569.709454][T27193] RIP: 0033:0x7f2d0d66eae9 [ 2569.713884][T27193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2569.733514][T27193] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:23:21 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3a00}, 0x0) 19:23:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb8501}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x29904) 19:23:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x232}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2569.741951][T27193] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2569.749940][T27193] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2569.757926][T27193] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2569.765909][T27193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2569.773912][T27193] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2569.781923][T27193] 19:23:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x6600, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 42) 19:23:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x6700, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2569.905280][T27209] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2569.923489][T27209] device 1205 entered promiscuous mode [ 2569.955756][T27215] FAULT_INJECTION: forcing a failure. [ 2569.955756][T27215] name failslab, interval 1, probability 0, space 0, times 0 [ 2569.968870][T27215] CPU: 0 PID: 27215 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2569.977311][T27215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2569.987378][T27215] Call Trace: [ 2569.990672][T27215] [ 2569.993625][T27215] dump_stack_lvl+0xcd/0x134 [ 2569.998240][T27215] should_fail.cold+0x5/0xa [ 2570.002776][T27215] ? crypto_create_tfm_node+0x7f/0x320 [ 2570.008260][T27215] should_failslab+0x5/0x10 [ 2570.012791][T27215] __kmalloc_node+0x75/0x370 [ 2570.017417][T27215] crypto_create_tfm_node+0x7f/0x320 [ 2570.022734][T27215] crypto_spawn_tfm2+0x60/0xb0 [ 2570.027528][T27215] ? cryptd_hash_init_tfm+0x120/0x120 [ 2570.032925][T27215] cryptd_aead_init_tfm+0x3c/0x140 [ 2570.038054][T27215] ? cryptd_hash_init_tfm+0x120/0x120 [ 2570.043459][T27215] crypto_aead_init_tfm+0x138/0x1a0 [ 2570.048778][T27215] crypto_create_tfm_node+0x10d/0x320 [ 2570.054177][T27215] crypto_alloc_tfm_node+0x107/0x260 [ 2570.059493][T27215] cryptd_alloc_aead+0x101/0x200 [ 2570.064459][T27215] ? cryptd_alloc_ahash+0x200/0x200 [ 2570.069690][T27215] ? __kmalloc_node+0x62/0x370 [ 2570.074496][T27215] simd_aead_init+0x67/0x1b0 [ 2570.079114][T27215] ? simd_aead_exit+0x40/0x40 [ 2570.083811][T27215] crypto_aead_init_tfm+0x138/0x1a0 [ 2570.089038][T27215] crypto_create_tfm_node+0x10d/0x320 [ 2570.094446][T27215] crypto_alloc_tfm_node+0x107/0x260 [ 2570.099763][T27215] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2570.105516][T27215] tipc_crypto_key_init+0x82/0x110 [ 2570.110639][T27215] ? tipc_ehdr_validate+0x240/0x240 [ 2570.115950][T27215] ? crypto_mod_put+0x8c/0x100 [ 2570.120748][T27215] tipc_nl_node_set_key+0xa5d/0xf70 [ 2570.125982][T27215] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2570.132258][T27215] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2570.138530][T27215] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2570.145921][T27215] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2570.153238][T27215] genl_family_rcv_msg_doit+0x228/0x320 [ 2570.158817][T27215] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2570.166219][T27215] ? mutex_lock_io_nested+0x1150/0x1150 [ 2570.171801][T27215] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2570.178066][T27215] ? __radix_tree_lookup+0x211/0x2a0 [ 2570.183379][T27215] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2570.189644][T27215] ? genl_get_cmd+0x3cf/0x480 [ 2570.194351][T27215] genl_rcv_msg+0x328/0x580 [ 2570.198887][T27215] ? genl_get_cmd+0x480/0x480 [ 2570.203589][T27215] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2570.209860][T27215] ? lock_release+0x720/0x720 [ 2570.214559][T27215] ? check_path.constprop.0+0x50/0x50 [ 2570.219959][T27215] netlink_rcv_skb+0x153/0x420 [ 2570.224746][T27215] ? genl_get_cmd+0x480/0x480 [ 2570.229451][T27215] ? netlink_ack+0xa60/0xa60 [ 2570.234080][T27215] ? netlink_deliver_tap+0x1b1/0xc30 [ 2570.239388][T27215] ? _copy_from_iter+0x12b/0x1320 [ 2570.244446][T27215] genl_rcv+0x24/0x40 [ 2570.248448][T27215] netlink_unicast+0x533/0x7d0 [ 2570.253244][T27215] ? netlink_attachskb+0x880/0x880 [ 2570.258377][T27215] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2570.264649][T27215] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2570.270911][T27215] ? __phys_addr_symbol+0x2c/0x70 [ 2570.275955][T27215] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2570.281702][T27215] ? __check_object_size+0x16e/0x3f0 [ 2570.287018][T27215] netlink_sendmsg+0x86d/0xda0 [ 2570.291817][T27215] ? netlink_unicast+0x7d0/0x7d0 [ 2570.296783][T27215] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2570.303051][T27215] ? netlink_unicast+0x7d0/0x7d0 [ 2570.308021][T27215] sock_sendmsg+0xcf/0x120 [ 2570.312469][T27215] ____sys_sendmsg+0x6e8/0x810 [ 2570.317267][T27215] ? kernel_sendmsg+0x50/0x50 [ 2570.321966][T27215] ? do_recvmmsg+0x6d0/0x6d0 [ 2570.326571][T27215] ? perf_trace_lock+0xeb/0x4d0 [ 2570.331428][T27215] ? lock_chain_count+0x20/0x20 [ 2570.336290][T27215] ? check_path.constprop.0+0x50/0x50 [ 2570.341848][T27215] ___sys_sendmsg+0xf3/0x170 [ 2570.346440][T27215] ? sendmsg_copy_msghdr+0x160/0x160 [ 2570.351732][T27215] ? __fget_files+0x21b/0x3e0 [ 2570.356419][T27215] ? lock_downgrade+0x6e0/0x6e0 [ 2570.361281][T27215] ? __fget_files+0x23d/0x3e0 [ 2570.365981][T27215] ? __fget_light+0xea/0x280 [ 2570.370577][T27215] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2570.376827][T27215] __sys_sendmsg+0xe5/0x1b0 [ 2570.381336][T27215] ? __sys_sendmsg_sock+0x30/0x30 [ 2570.386373][T27215] ? syscall_enter_from_user_mode+0x21/0x70 [ 2570.392283][T27215] do_syscall_64+0x35/0xb0 [ 2570.396702][T27215] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2570.402593][T27215] RIP: 0033:0x7f2d0d66eae9 [ 2570.407006][T27215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2570.426797][T27215] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2570.435206][T27215] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2570.443171][T27215] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 19:23:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x29905) 19:23:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x23c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb8502}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:21 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3b00}, 0x0) [ 2570.451223][T27215] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2570.459190][T27215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2570.467155][T27215] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2570.475138][T27215] 19:23:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x6800, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 43) 19:23:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2570.662534][T27238] FAULT_INJECTION: forcing a failure. [ 2570.662534][T27238] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.675280][T27238] CPU: 0 PID: 27238 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2570.683721][T27238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2570.693794][T27238] Call Trace: [ 2570.697090][T27238] [ 2570.700037][T27238] dump_stack_lvl+0xcd/0x134 [ 2570.704668][T27238] should_fail.cold+0x5/0xa [ 2570.709209][T27238] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2570.715130][T27238] should_failslab+0x5/0x10 [ 2570.719656][T27238] kmem_cache_alloc_trace+0x55/0x2b0 [ 2570.724962][T27238] ? crypto_aead_setkey+0x10f/0x290 [ 2570.730195][T27238] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2570.735959][T27238] tipc_crypto_key_init+0x82/0x110 [ 2570.741105][T27238] ? tipc_ehdr_validate+0x240/0x240 [ 2570.746322][T27238] ? crypto_mod_put+0x8c/0x100 [ 2570.751121][T27238] tipc_nl_node_set_key+0xa5d/0xf70 [ 2570.756349][T27238] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2570.762622][T27238] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2570.768891][T27238] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2570.776291][T27238] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2570.783625][T27238] genl_family_rcv_msg_doit+0x228/0x320 [ 2570.789208][T27238] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2570.796623][T27238] ? mutex_lock_io_nested+0x1150/0x1150 [ 2570.802219][T27238] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2570.808497][T27238] ? __radix_tree_lookup+0x211/0x2a0 [ 2570.813807][T27238] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2570.820075][T27238] ? genl_get_cmd+0x3cf/0x480 [ 2570.824783][T27238] genl_rcv_msg+0x328/0x580 [ 2570.829317][T27238] ? genl_get_cmd+0x480/0x480 [ 2570.834019][T27238] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2570.840293][T27238] ? lock_release+0x720/0x720 [ 2570.844996][T27238] ? check_path.constprop.0+0x50/0x50 [ 2570.850404][T27238] netlink_rcv_skb+0x153/0x420 [ 2570.855197][T27238] ? genl_get_cmd+0x480/0x480 [ 2570.859901][T27238] ? netlink_ack+0xa60/0xa60 [ 2570.864526][T27238] ? netlink_deliver_tap+0x1b1/0xc30 [ 2570.869837][T27238] ? _copy_from_iter+0x12b/0x1320 [ 2570.874901][T27238] genl_rcv+0x24/0x40 [ 2570.878914][T27238] netlink_unicast+0x533/0x7d0 [ 2570.883712][T27238] ? netlink_attachskb+0x880/0x880 [ 2570.888875][T27238] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2570.895142][T27238] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2570.901441][T27238] ? __phys_addr_symbol+0x2c/0x70 [ 2570.906484][T27238] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2570.912227][T27238] ? __check_object_size+0x16e/0x3f0 [ 2570.917543][T27238] netlink_sendmsg+0x86d/0xda0 [ 2570.922342][T27238] ? netlink_unicast+0x7d0/0x7d0 [ 2570.927318][T27238] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2570.933597][T27238] ? netlink_unicast+0x7d0/0x7d0 [ 2570.938562][T27238] sock_sendmsg+0xcf/0x120 [ 2570.943010][T27238] ____sys_sendmsg+0x6e8/0x810 [ 2570.947807][T27238] ? kernel_sendmsg+0x50/0x50 [ 2570.952515][T27238] ? do_recvmmsg+0x6d0/0x6d0 [ 2570.957128][T27238] ? perf_trace_lock+0xeb/0x4d0 [ 2570.961998][T27238] ? lock_chain_count+0x20/0x20 [ 2570.966880][T27238] ? check_path.constprop.0+0x50/0x50 [ 2570.972283][T27238] ___sys_sendmsg+0xf3/0x170 [ 2570.976899][T27238] ? sendmsg_copy_msghdr+0x160/0x160 [ 2570.982216][T27238] ? __fget_files+0x21b/0x3e0 [ 2570.986916][T27238] ? lock_downgrade+0x6e0/0x6e0 [ 2570.991809][T27238] ? __fget_files+0x23d/0x3e0 [ 2570.996523][T27238] ? __fget_light+0xea/0x280 [ 2571.001135][T27238] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2571.007409][T27238] __sys_sendmsg+0xe5/0x1b0 [ 2571.011938][T27238] ? __sys_sendmsg_sock+0x30/0x30 [ 2571.017004][T27238] ? syscall_enter_from_user_mode+0x21/0x70 [ 2571.022924][T27238] do_syscall_64+0x35/0xb0 [ 2571.027366][T27238] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2571.033281][T27238] RIP: 0033:0x7f2d0d66eae9 [ 2571.037711][T27238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:23:22 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3c00}, 0x0) 19:23:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x29906) 19:23:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb8503}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2571.057338][T27238] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2571.065773][T27238] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2571.073758][T27238] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2571.081745][T27238] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2571.089731][T27238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2571.097717][T27238] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2571.105721][T27238] 19:23:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x2, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 44) [ 2571.241948][T27252] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2571.260232][T27252] device 1206 entered promiscuous mode [ 2571.273155][T27258] FAULT_INJECTION: forcing a failure. [ 2571.273155][T27258] name failslab, interval 1, probability 0, space 0, times 0 [ 2571.285940][T27258] CPU: 0 PID: 27258 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2571.294386][T27258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2571.304502][T27258] Call Trace: [ 2571.307794][T27258] [ 2571.310743][T27258] dump_stack_lvl+0xcd/0x134 [ 2571.315360][T27258] should_fail.cold+0x5/0xa [ 2571.319898][T27258] ? crypto_create_tfm_node+0x7f/0x320 [ 2571.325382][T27258] should_failslab+0x5/0x10 [ 2571.329932][T27258] __kmalloc_node+0x75/0x370 [ 2571.334553][T27258] crypto_create_tfm_node+0x7f/0x320 [ 2571.339866][T27258] crypto_alloc_tfm_node+0x107/0x260 [ 2571.345182][T27258] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2571.350941][T27258] tipc_crypto_key_init+0x82/0x110 [ 2571.356076][T27258] ? tipc_ehdr_validate+0x240/0x240 [ 2571.361294][T27258] ? crypto_mod_put+0x8c/0x100 [ 2571.366127][T27258] tipc_nl_node_set_key+0xa5d/0xf70 [ 2571.371359][T27258] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2571.377665][T27258] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2571.383930][T27258] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2571.391324][T27258] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2571.398647][T27258] genl_family_rcv_msg_doit+0x228/0x320 [ 2571.404225][T27258] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2571.411623][T27258] ? mutex_lock_io_nested+0x1150/0x1150 [ 2571.417215][T27258] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2571.423480][T27258] ? __radix_tree_lookup+0x211/0x2a0 [ 2571.428786][T27258] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2571.435055][T27258] ? genl_get_cmd+0x3cf/0x480 [ 2571.439764][T27258] genl_rcv_msg+0x328/0x580 [ 2571.444302][T27258] ? genl_get_cmd+0x480/0x480 [ 2571.449005][T27258] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2571.455277][T27258] ? lock_release+0x720/0x720 [ 2571.459975][T27258] ? check_path.constprop.0+0x50/0x50 [ 2571.465374][T27258] netlink_rcv_skb+0x153/0x420 [ 2571.470164][T27258] ? genl_get_cmd+0x480/0x480 [ 2571.474867][T27258] ? netlink_ack+0xa60/0xa60 [ 2571.479489][T27258] ? netlink_deliver_tap+0x1b1/0xc30 [ 2571.484795][T27258] ? _copy_from_iter+0x12b/0x1320 [ 2571.489860][T27258] genl_rcv+0x24/0x40 [ 2571.493863][T27258] netlink_unicast+0x533/0x7d0 [ 2571.498659][T27258] ? netlink_attachskb+0x880/0x880 [ 2571.503793][T27258] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2571.510064][T27258] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2571.516331][T27258] ? __phys_addr_symbol+0x2c/0x70 [ 2571.521462][T27258] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2571.527201][T27258] ? __check_object_size+0x16e/0x3f0 [ 2571.532515][T27258] netlink_sendmsg+0x86d/0xda0 [ 2571.537311][T27258] ? netlink_unicast+0x7d0/0x7d0 [ 2571.542283][T27258] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2571.548567][T27258] ? netlink_unicast+0x7d0/0x7d0 [ 2571.553660][T27258] sock_sendmsg+0xcf/0x120 [ 2571.558109][T27258] ____sys_sendmsg+0x6e8/0x810 [ 2571.562906][T27258] ? kernel_sendmsg+0x50/0x50 [ 2571.567603][T27258] ? do_recvmmsg+0x6d0/0x6d0 [ 2571.572217][T27258] ? perf_trace_lock+0xeb/0x4d0 [ 2571.577084][T27258] ? lock_chain_count+0x20/0x20 [ 2571.581960][T27258] ? check_path.constprop.0+0x50/0x50 [ 2571.587359][T27258] ___sys_sendmsg+0xf3/0x170 [ 2571.591971][T27258] ? sendmsg_copy_msghdr+0x160/0x160 [ 2571.597284][T27258] ? __fget_files+0x21b/0x3e0 [ 2571.601983][T27258] ? lock_downgrade+0x6e0/0x6e0 [ 2571.606852][T27258] ? __fget_files+0x23d/0x3e0 [ 2571.611545][T27258] ? __fget_light+0xea/0x280 [ 2571.616141][T27258] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2571.622418][T27258] __sys_sendmsg+0xe5/0x1b0 [ 2571.626941][T27258] ? __sys_sendmsg_sock+0x30/0x30 [ 2571.631996][T27258] ? syscall_enter_from_user_mode+0x21/0x70 [ 2571.637904][T27258] do_syscall_64+0x35/0xb0 [ 2571.642332][T27258] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2571.648243][T27258] RIP: 0033:0x7f2d0d66eae9 [ 2571.652660][T27258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2571.672271][T27258] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2571.680705][T27258] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 19:23:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x3, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x24a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:22 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3d00}, 0x0) 19:23:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb8504}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x29907) [ 2571.688678][T27258] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2571.696662][T27258] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2571.704643][T27258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2571.712610][T27258] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2571.720595][T27258] 19:23:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 45) 19:23:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x5, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2571.919936][T27282] FAULT_INJECTION: forcing a failure. [ 2571.919936][T27282] name failslab, interval 1, probability 0, space 0, times 0 [ 2571.932686][T27282] CPU: 0 PID: 27282 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2571.941123][T27282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2571.951194][T27282] Call Trace: [ 2571.954482][T27282] [ 2571.957428][T27282] dump_stack_lvl+0xcd/0x134 [ 2571.962042][T27282] should_fail.cold+0x5/0xa [ 2571.966846][T27282] ? crypto_create_tfm_node+0x7f/0x320 [ 2571.972329][T27282] should_failslab+0x5/0x10 [ 2571.976855][T27282] __kmalloc_node+0x75/0x370 [ 2571.981490][T27282] crypto_create_tfm_node+0x7f/0x320 [ 2571.986802][T27282] crypto_alloc_tfm_node+0x107/0x260 [ 2571.992123][T27282] cryptd_alloc_aead+0x101/0x200 [ 2571.997091][T27282] ? cryptd_alloc_ahash+0x200/0x200 [ 2572.002323][T27282] ? __kmalloc_node+0x62/0x370 [ 2572.007131][T27282] simd_aead_init+0x67/0x1b0 [ 2572.011736][T27282] ? simd_aead_exit+0x40/0x40 [ 2572.016436][T27282] crypto_aead_init_tfm+0x138/0x1a0 [ 2572.021656][T27282] crypto_create_tfm_node+0x10d/0x320 [ 2572.027056][T27282] crypto_alloc_tfm_node+0x107/0x260 [ 2572.032371][T27282] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2572.038141][T27282] tipc_crypto_key_init+0x82/0x110 [ 2572.043276][T27282] ? tipc_ehdr_validate+0x240/0x240 [ 2572.048509][T27282] ? crypto_mod_put+0x8c/0x100 [ 2572.053309][T27282] tipc_nl_node_set_key+0xa5d/0xf70 [ 2572.058540][T27282] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2572.064817][T27282] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2572.071083][T27282] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2572.078482][T27282] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2572.085889][T27282] genl_family_rcv_msg_doit+0x228/0x320 [ 2572.091466][T27282] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2572.098864][T27282] ? mutex_lock_io_nested+0x1150/0x1150 [ 2572.104456][T27282] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2572.110721][T27282] ? __radix_tree_lookup+0x211/0x2a0 [ 2572.116021][T27282] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2572.122283][T27282] ? genl_get_cmd+0x3cf/0x480 [ 2572.126988][T27282] genl_rcv_msg+0x328/0x580 [ 2572.131518][T27282] ? genl_get_cmd+0x480/0x480 [ 2572.136221][T27282] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2572.142494][T27282] ? lock_release+0x720/0x720 [ 2572.147196][T27282] ? check_path.constprop.0+0x50/0x50 [ 2572.152600][T27282] netlink_rcv_skb+0x153/0x420 [ 2572.157394][T27282] ? genl_get_cmd+0x480/0x480 [ 2572.162104][T27282] ? netlink_ack+0xa60/0xa60 [ 2572.166727][T27282] ? netlink_deliver_tap+0x1b1/0xc30 [ 2572.172029][T27282] ? _copy_from_iter+0x12b/0x1320 [ 2572.177085][T27282] genl_rcv+0x24/0x40 [ 2572.181089][T27282] netlink_unicast+0x533/0x7d0 [ 2572.185883][T27282] ? netlink_attachskb+0x880/0x880 [ 2572.191017][T27282] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2572.197285][T27282] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2572.203549][T27282] ? __phys_addr_symbol+0x2c/0x70 [ 2572.208595][T27282] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2572.214337][T27282] ? __check_object_size+0x16e/0x3f0 [ 2572.219646][T27282] netlink_sendmsg+0x86d/0xda0 [ 2572.224444][T27282] ? netlink_unicast+0x7d0/0x7d0 [ 2572.229419][T27282] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2572.235689][T27282] ? netlink_unicast+0x7d0/0x7d0 [ 2572.240650][T27282] sock_sendmsg+0xcf/0x120 [ 2572.245097][T27282] ____sys_sendmsg+0x6e8/0x810 [ 2572.249893][T27282] ? kernel_sendmsg+0x50/0x50 [ 2572.254595][T27282] ? do_recvmmsg+0x6d0/0x6d0 [ 2572.259211][T27282] ? perf_trace_lock+0xeb/0x4d0 [ 2572.264079][T27282] ? lock_chain_count+0x20/0x20 [ 2572.268959][T27282] ? check_path.constprop.0+0x50/0x50 [ 2572.274360][T27282] ___sys_sendmsg+0xf3/0x170 [ 2572.278976][T27282] ? sendmsg_copy_msghdr+0x160/0x160 [ 2572.284293][T27282] ? __fget_files+0x21b/0x3e0 [ 2572.288992][T27282] ? lock_downgrade+0x6e0/0x6e0 [ 2572.293869][T27282] ? __fget_files+0x23d/0x3e0 [ 2572.298661][T27282] ? __fget_light+0xea/0x280 [ 2572.303274][T27282] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2572.309545][T27282] __sys_sendmsg+0xe5/0x1b0 [ 2572.314077][T27282] ? __sys_sendmsg_sock+0x30/0x30 [ 2572.319141][T27282] ? syscall_enter_from_user_mode+0x21/0x70 [ 2572.325058][T27282] do_syscall_64+0x35/0xb0 [ 2572.329583][T27282] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2572.335496][T27282] RIP: 0033:0x7f2d0d66eae9 [ 2572.339925][T27282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2572.359641][T27282] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:23:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x254}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:23 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x29908) 19:23:23 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3e00}, 0x0) 19:23:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb8505}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2572.368060][T27282] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2572.376029][T27282] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2572.384003][T27282] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2572.391971][T27282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2572.399935][T27282] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2572.407923][T27282] 19:23:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x6, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x7, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2572.553398][T27300] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 19:23:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 46) [ 2572.683660][T27300] device 1207 entered promiscuous mode [ 2572.706285][T27311] FAULT_INJECTION: forcing a failure. [ 2572.706285][T27311] name failslab, interval 1, probability 0, space 0, times 0 [ 2572.719023][T27311] CPU: 0 PID: 27311 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2572.727508][T27311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2572.737580][T27311] Call Trace: [ 2572.740873][T27311] [ 2572.743815][T27311] dump_stack_lvl+0xcd/0x134 [ 2572.748432][T27311] should_fail.cold+0x5/0xa [ 2572.752970][T27311] ? crypto_create_tfm_node+0x7f/0x320 [ 2572.758448][T27311] should_failslab+0x5/0x10 [ 2572.762973][T27311] __kmalloc_node+0x75/0x370 [ 2572.767595][T27311] crypto_create_tfm_node+0x7f/0x320 [ 2572.772912][T27311] crypto_spawn_tfm2+0x60/0xb0 [ 2572.777696][T27311] ? cryptd_hash_init_tfm+0x120/0x120 [ 2572.783095][T27311] cryptd_aead_init_tfm+0x3c/0x140 [ 2572.788249][T27311] ? cryptd_hash_init_tfm+0x120/0x120 [ 2572.793647][T27311] crypto_aead_init_tfm+0x138/0x1a0 [ 2572.798869][T27311] crypto_create_tfm_node+0x10d/0x320 [ 2572.804260][T27311] crypto_alloc_tfm_node+0x107/0x260 [ 2572.809579][T27311] cryptd_alloc_aead+0x101/0x200 [ 2572.814542][T27311] ? cryptd_alloc_ahash+0x200/0x200 [ 2572.819773][T27311] ? __kmalloc_node+0x62/0x370 [ 2572.824575][T27311] simd_aead_init+0x67/0x1b0 [ 2572.829187][T27311] ? simd_aead_exit+0x40/0x40 [ 2572.834059][T27311] crypto_aead_init_tfm+0x138/0x1a0 [ 2572.839283][T27311] crypto_create_tfm_node+0x10d/0x320 [ 2572.844683][T27311] crypto_alloc_tfm_node+0x107/0x260 [ 2572.850002][T27311] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 2572.855776][T27311] tipc_crypto_key_init+0x82/0x110 [ 2572.860912][T27311] ? tipc_ehdr_validate+0x240/0x240 [ 2572.866132][T27311] ? crypto_mod_put+0x8c/0x100 [ 2572.870939][T27311] tipc_nl_node_set_key+0xa5d/0xf70 [ 2572.876167][T27311] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2572.882443][T27311] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2572.888712][T27311] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2572.896204][T27311] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2572.903879][T27311] genl_family_rcv_msg_doit+0x228/0x320 [ 2572.909453][T27311] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2572.916936][T27311] ? mutex_lock_io_nested+0x1150/0x1150 [ 2572.922526][T27311] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2572.928796][T27311] ? __radix_tree_lookup+0x211/0x2a0 [ 2572.934104][T27311] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2572.940369][T27311] ? genl_get_cmd+0x3cf/0x480 [ 2572.945077][T27311] genl_rcv_msg+0x328/0x580 [ 2572.949612][T27311] ? genl_get_cmd+0x480/0x480 [ 2572.954317][T27311] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2572.960588][T27311] ? lock_release+0x720/0x720 [ 2572.965288][T27311] ? check_path.constprop.0+0x50/0x50 [ 2572.970688][T27311] netlink_rcv_skb+0x153/0x420 [ 2572.975480][T27311] ? genl_get_cmd+0x480/0x480 [ 2572.980163][T27311] ? netlink_ack+0xa60/0xa60 [ 2572.984771][T27311] ? netlink_deliver_tap+0x1b1/0xc30 [ 2572.990058][T27311] ? _copy_from_iter+0x12b/0x1320 [ 2572.995097][T27311] genl_rcv+0x24/0x40 [ 2572.999082][T27311] netlink_unicast+0x533/0x7d0 [ 2573.003850][T27311] ? netlink_attachskb+0x880/0x880 [ 2573.008979][T27311] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2573.015230][T27311] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2573.021475][T27311] ? __phys_addr_symbol+0x2c/0x70 [ 2573.026503][T27311] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2573.032225][T27311] ? __check_object_size+0x16e/0x3f0 [ 2573.037528][T27311] netlink_sendmsg+0x86d/0xda0 [ 2573.042303][T27311] ? netlink_unicast+0x7d0/0x7d0 [ 2573.047262][T27311] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2573.053507][T27311] ? netlink_unicast+0x7d0/0x7d0 [ 2573.058445][T27311] sock_sendmsg+0xcf/0x120 [ 2573.062868][T27311] ____sys_sendmsg+0x6e8/0x810 [ 2573.067638][T27311] ? kernel_sendmsg+0x50/0x50 [ 2573.072315][T27311] ? do_recvmmsg+0x6d0/0x6d0 [ 2573.076903][T27311] ? perf_trace_lock+0xeb/0x4d0 [ 2573.081755][T27311] ? lock_chain_count+0x20/0x20 [ 2573.086611][T27311] ? check_path.constprop.0+0x50/0x50 [ 2573.091989][T27311] ___sys_sendmsg+0xf3/0x170 [ 2573.096582][T27311] ? sendmsg_copy_msghdr+0x160/0x160 [ 2573.101870][T27311] ? __fget_files+0x21b/0x3e0 [ 2573.106548][T27311] ? lock_downgrade+0x6e0/0x6e0 [ 2573.111411][T27311] ? __fget_files+0x23d/0x3e0 [ 2573.116096][T27311] ? __fget_light+0xea/0x280 [ 2573.120687][T27311] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2573.126949][T27311] __sys_sendmsg+0xe5/0x1b0 [ 2573.131451][T27311] ? __sys_sendmsg_sock+0x30/0x30 [ 2573.136486][T27311] ? syscall_enter_from_user_mode+0x21/0x70 [ 2573.142398][T27311] do_syscall_64+0x35/0xb0 [ 2573.146832][T27311] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2573.152726][T27311] RIP: 0033:0x7f2d0d66eae9 [ 2573.157151][T27311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2573.176757][T27311] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:23:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x29909) 19:23:24 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x3f00}, 0x0) 19:23:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x264}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb8506}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x8, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2573.185166][T27311] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2573.193143][T27311] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2573.201112][T27311] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2573.209075][T27311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2573.217054][T27311] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2573.225040][T27311] 19:23:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x9, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 47) 19:23:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0xf, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) [ 2573.428456][T27331] FAULT_INJECTION: forcing a failure. [ 2573.428456][T27331] name failslab, interval 1, probability 0, space 0, times 0 [ 2573.441241][T27331] CPU: 0 PID: 27331 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2573.449681][T27331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2573.459763][T27331] Call Trace: [ 2573.463054][T27331] [ 2573.466003][T27331] dump_stack_lvl+0xcd/0x134 [ 2573.470621][T27331] should_fail.cold+0x5/0xa [ 2573.475161][T27331] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2573.481077][T27331] should_failslab+0x5/0x10 [ 2573.485601][T27331] kmem_cache_alloc_trace+0x55/0x2b0 [ 2573.490907][T27331] ? crypto_aead_setkey+0x10f/0x290 [ 2573.496141][T27331] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 2573.501902][T27331] tipc_crypto_key_init+0x82/0x110 [ 2573.507038][T27331] ? tipc_ehdr_validate+0x240/0x240 [ 2573.512253][T27331] ? crypto_mod_put+0x8c/0x100 [ 2573.517052][T27331] tipc_nl_node_set_key+0xa5d/0xf70 [ 2573.522283][T27331] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2573.528558][T27331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2573.534829][T27331] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2573.542227][T27331] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2573.549555][T27331] genl_family_rcv_msg_doit+0x228/0x320 [ 2573.555130][T27331] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2573.562529][T27331] ? mutex_lock_io_nested+0x1150/0x1150 [ 2573.568118][T27331] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2573.574405][T27331] ? __radix_tree_lookup+0x211/0x2a0 [ 2573.579715][T27331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2573.585979][T27331] ? genl_get_cmd+0x3cf/0x480 [ 2573.590683][T27331] genl_rcv_msg+0x328/0x580 [ 2573.595218][T27331] ? genl_get_cmd+0x480/0x480 [ 2573.599932][T27331] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2573.606292][T27331] ? lock_release+0x720/0x720 [ 2573.610991][T27331] ? check_path.constprop.0+0x50/0x50 [ 2573.616474][T27331] netlink_rcv_skb+0x153/0x420 [ 2573.621264][T27331] ? genl_get_cmd+0x480/0x480 [ 2573.625972][T27331] ? netlink_ack+0xa60/0xa60 [ 2573.630692][T27331] ? netlink_deliver_tap+0x1b1/0xc30 [ 2573.636001][T27331] ? _copy_from_iter+0x12b/0x1320 [ 2573.641054][T27331] genl_rcv+0x24/0x40 [ 2573.645057][T27331] netlink_unicast+0x533/0x7d0 [ 2573.649850][T27331] ? netlink_attachskb+0x880/0x880 [ 2573.654982][T27331] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2573.661253][T27331] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2573.667522][T27331] ? __phys_addr_symbol+0x2c/0x70 [ 2573.672574][T27331] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2573.678319][T27331] ? __check_object_size+0x16e/0x3f0 [ 2573.683627][T27331] netlink_sendmsg+0x86d/0xda0 [ 2573.688421][T27331] ? netlink_unicast+0x7d0/0x7d0 [ 2573.693390][T27331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2573.699655][T27331] ? netlink_unicast+0x7d0/0x7d0 [ 2573.704618][T27331] sock_sendmsg+0xcf/0x120 [ 2573.709058][T27331] ____sys_sendmsg+0x6e8/0x810 [ 2573.713853][T27331] ? kernel_sendmsg+0x50/0x50 [ 2573.718551][T27331] ? do_recvmmsg+0x6d0/0x6d0 [ 2573.723170][T27331] ? perf_trace_lock+0xeb/0x4d0 [ 2573.728052][T27331] ? lock_chain_count+0x20/0x20 [ 2573.732929][T27331] ? check_path.constprop.0+0x50/0x50 [ 2573.738325][T27331] ___sys_sendmsg+0xf3/0x170 [ 2573.742935][T27331] ? sendmsg_copy_msghdr+0x160/0x160 [ 2573.748244][T27331] ? __fget_files+0x21b/0x3e0 [ 2573.752949][T27331] ? lock_downgrade+0x6e0/0x6e0 [ 2573.757835][T27331] ? __fget_files+0x23d/0x3e0 [ 2573.762544][T27331] ? __fget_light+0xea/0x280 [ 2573.767161][T27331] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2573.773432][T27331] __sys_sendmsg+0xe5/0x1b0 [ 2573.777954][T27331] ? __sys_sendmsg_sock+0x30/0x30 [ 2573.783013][T27331] ? syscall_enter_from_user_mode+0x21/0x70 [ 2573.788928][T27331] do_syscall_64+0x35/0xb0 [ 2573.793377][T27331] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2573.799294][T27331] RIP: 0033:0x7f2d0d66eae9 [ 2573.803734][T27331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:23:25 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x4000}, 0x0) 19:23:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x274}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) 19:23:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffc7c, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0002000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x2990a) 19:23:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb8507}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x38}}, 0x0) [ 2573.823462][T27331] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2573.831898][T27331] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2573.840010][T27331] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2573.847997][T27331] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2573.855979][T27331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2573.864056][T27331] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2573.872072][T27331] 19:23:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0xf0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) 19:23:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb4147a4c8468ae3782bdaba598587c5e3ac6f70"}}]}]}, 0x54}}, 0x0) (fail_nth: 48) [ 2574.007518][T27343] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2574.025490][T27343] device 1208 entered promiscuous mode [ 2574.036224][T27352] FAULT_INJECTION: forcing a failure. [ 2574.036224][T27352] name failslab, interval 1, probability 0, space 0, times 0 [ 2574.048977][T27352] CPU: 0 PID: 27352 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2574.057413][T27352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2574.067482][T27352] Call Trace: [ 2574.070772][T27352] [ 2574.073712][T27352] dump_stack_lvl+0xcd/0x134 [ 2574.078329][T27352] should_fail.cold+0x5/0xa [ 2574.082868][T27352] should_failslab+0x5/0x10 [ 2574.087390][T27352] __kmalloc_track_caller+0x79/0x310 [ 2574.092701][T27352] ? tipc_aead_init.constprop.0+0x418/0x8f0 [ 2574.098620][T27352] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2574.104200][T27352] kmemdup+0x23/0x50 [ 2574.108139][T27352] tipc_aead_init.constprop.0+0x418/0x8f0 [ 2574.113902][T27352] tipc_crypto_key_init+0x82/0x110 [ 2574.119037][T27352] ? tipc_ehdr_validate+0x240/0x240 [ 2574.124255][T27352] ? crypto_mod_put+0x8c/0x100 [ 2574.129055][T27352] tipc_nl_node_set_key+0xa5d/0xf70 [ 2574.134285][T27352] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2574.140564][T27352] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2574.146832][T27352] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2574.154228][T27352] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2574.161555][T27352] genl_family_rcv_msg_doit+0x228/0x320 [ 2574.167128][T27352] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2574.174530][T27352] ? mutex_lock_io_nested+0x1150/0x1150 [ 2574.180112][T27352] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2574.186384][T27352] ? __radix_tree_lookup+0x211/0x2a0 [ 2574.191696][T27352] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2574.197963][T27352] ? genl_get_cmd+0x3cf/0x480 [ 2574.202670][T27352] genl_rcv_msg+0x328/0x580 [ 2574.207207][T27352] ? genl_get_cmd+0x480/0x480 [ 2574.211920][T27352] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2574.218203][T27352] ? lock_release+0x720/0x720 [ 2574.222908][T27352] ? check_path.constprop.0+0x50/0x50 [ 2574.228308][T27352] netlink_rcv_skb+0x153/0x420 [ 2574.233102][T27352] ? genl_get_cmd+0x480/0x480 [ 2574.237811][T27352] ? netlink_ack+0xa60/0xa60 [ 2574.242441][T27352] ? netlink_deliver_tap+0x1b1/0xc30 [ 2574.247756][T27352] ? _copy_from_iter+0x12b/0x1320 [ 2574.252813][T27352] genl_rcv+0x24/0x40 [ 2574.256823][T27352] netlink_unicast+0x533/0x7d0 [ 2574.261619][T27352] ? netlink_attachskb+0x880/0x880 [ 2574.266756][T27352] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2574.273025][T27352] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2574.279294][T27352] ? __phys_addr_symbol+0x2c/0x70 [ 2574.284343][T27352] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2574.290088][T27352] ? __check_object_size+0x16e/0x3f0 [ 2574.295410][T27352] netlink_sendmsg+0x86d/0xda0 [ 2574.300209][T27352] ? netlink_unicast+0x7d0/0x7d0 [ 2574.305179][T27352] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2574.311444][T27352] ? netlink_unicast+0x7d0/0x7d0 [ 2574.316411][T27352] sock_sendmsg+0xcf/0x120 [ 2574.320857][T27352] ____sys_sendmsg+0x6e8/0x810 [ 2574.325652][T27352] ? kernel_sendmsg+0x50/0x50 [ 2574.330350][T27352] ? do_recvmmsg+0x6d0/0x6d0 [ 2574.334964][T27352] ? perf_trace_lock+0xeb/0x4d0 [ 2574.339840][T27352] ? lock_chain_count+0x20/0x20 [ 2574.344717][T27352] ? check_path.constprop.0+0x50/0x50 [ 2574.350125][T27352] ___sys_sendmsg+0xf3/0x170 [ 2574.354739][T27352] ? sendmsg_copy_msghdr+0x160/0x160 [ 2574.360055][T27352] ? __fget_files+0x21b/0x3e0 [ 2574.364756][T27352] ? lock_downgrade+0x6e0/0x6e0 [ 2574.369645][T27352] ? __fget_files+0x23d/0x3e0 [ 2574.374354][T27352] ? __fget_light+0xea/0x280 [ 2574.378968][T27352] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2574.385238][T27352] __sys_sendmsg+0xe5/0x1b0 [ 2574.389761][T27352] ? __sys_sendmsg_sock+0x30/0x30 [ 2574.394824][T27352] ? syscall_enter_from_user_mode+0x21/0x70 [ 2574.400752][T27352] do_syscall_64+0x35/0xb0 [ 2574.405191][T27352] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2574.411108][T27352] RIP: 0033:0x7f2d0d66eae9 [ 2574.415542][T27352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2574.435260][T27352] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2574.443700][T27352] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2574.451693][T27352] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2574.459682][T27352] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2574.467672][T27352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2574.475659][T27352] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2574.483798][T27352] [ 2574.487683][T27352] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN [ 2574.499415][T27352] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 2574.507830][T27352] CPU: 0 PID: 27352 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 2574.516254][T27352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2574.526342][T27352] RIP: 0010:tipc_crypto_key_distr+0x218/0xa80 [ 2574.532434][T27352] Code: 02 00 0f 85 66 08 00 00 48 8b 45 00 49 8d 4d 20 48 89 ca 48 89 4c 24 10 48 c1 ea 03 48 89 04 24 48 b8 00 00 00 00 00 fc ff df <0f> b6 14 02 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 b0 [ 2574.552056][T27352] RSP: 0018:ffffc9001844f3f0 EFLAGS: 00010202 [ 2574.558132][T27352] RAX: dffffc0000000000 RBX: ffff8881703ff000 RCX: 0000000000000020 [ 2574.566132][T27352] RDX: 0000000000000004 RSI: ffffffff88b14ee7 RDI: ffff8881703ff040 [ 2574.574097][T27352] RBP: ffff888076790400 R08: 0000000000000000 R09: 0000000000000000 [ 2574.582061][T27352] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 2574.590022][T27352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000038 [ 2574.597982][T27352] FS: 00007f2d0abe4700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 2574.606921][T27352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2574.613501][T27352] CR2: 0000001b32022000 CR3: 000000016f291000 CR4: 00000000003506f0 [ 2574.621470][T27352] Call Trace: [ 2574.624745][T27352] [ 2574.627676][T27352] ? tipc_aead_init.constprop.0+0x533/0x8f0 [ 2574.633579][T27352] ? tipc_crypto_msg_rcv+0x9d0/0x9d0 [ 2574.638881][T27352] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2574.645130][T27352] ? tipc_crypto_key_init+0xc1/0x110 [ 2574.650417][T27352] ? tipc_ehdr_validate+0x240/0x240 [ 2574.655616][T27352] ? crypto_mod_put+0x8c/0x100 [ 2574.660379][T27352] tipc_nl_node_set_key+0xa95/0xf70 [ 2574.665576][T27352] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2574.671821][T27352] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2574.678059][T27352] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2574.685430][T27352] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2574.692729][T27352] genl_family_rcv_msg_doit+0x228/0x320 [ 2574.698292][T27352] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2574.705662][T27352] ? mutex_lock_io_nested+0x1150/0x1150 [ 2574.711209][T27352] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2574.717457][T27352] ? __radix_tree_lookup+0x211/0x2a0 [ 2574.722757][T27352] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2574.729012][T27352] ? genl_get_cmd+0x3cf/0x480 [ 2574.733701][T27352] genl_rcv_msg+0x328/0x580 [ 2574.738209][T27352] ? genl_get_cmd+0x480/0x480 [ 2574.742886][T27352] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 2574.749125][T27352] ? lock_release+0x720/0x720 [ 2574.753798][T27352] ? check_path.constprop.0+0x50/0x50 [ 2574.759168][T27352] netlink_rcv_skb+0x153/0x420 [ 2574.763932][T27352] ? genl_get_cmd+0x480/0x480 [ 2574.768607][T27352] ? netlink_ack+0xa60/0xa60 [ 2574.773194][T27352] ? netlink_deliver_tap+0x1b1/0xc30 [ 2574.778476][T27352] ? _copy_from_iter+0x12b/0x1320 [ 2574.783499][T27352] genl_rcv+0x24/0x40 [ 2574.787476][T27352] netlink_unicast+0x533/0x7d0 [ 2574.792240][T27352] ? netlink_attachskb+0x880/0x880 [ 2574.797346][T27352] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2574.803588][T27352] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2574.809826][T27352] ? __phys_addr_symbol+0x2c/0x70 [ 2574.814845][T27352] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2574.820593][T27352] ? __check_object_size+0x16e/0x3f0 [ 2574.825891][T27352] netlink_sendmsg+0x86d/0xda0 [ 2574.830677][T27352] ? netlink_unicast+0x7d0/0x7d0 [ 2574.835623][T27352] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2574.841868][T27352] ? netlink_unicast+0x7d0/0x7d0 [ 2574.846809][T27352] sock_sendmsg+0xcf/0x120 [ 2574.851237][T27352] ____sys_sendmsg+0x6e8/0x810 [ 2574.856026][T27352] ? kernel_sendmsg+0x50/0x50 [ 2574.860707][T27352] ? do_recvmmsg+0x6d0/0x6d0 [ 2574.865297][T27352] ? perf_trace_lock+0xeb/0x4d0 [ 2574.870157][T27352] ? lock_chain_count+0x20/0x20 [ 2574.875006][T27352] ? check_path.constprop.0+0x50/0x50 [ 2574.880378][T27352] ___sys_sendmsg+0xf3/0x170 [ 2574.884983][T27352] ? sendmsg_copy_msghdr+0x160/0x160 [ 2574.890262][T27352] ? __fget_files+0x21b/0x3e0 [ 2574.894934][T27352] ? lock_downgrade+0x6e0/0x6e0 [ 2574.899788][T27352] ? __fget_files+0x23d/0x3e0 [ 2574.904466][T27352] ? __fget_light+0xea/0x280 [ 2574.909052][T27352] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2574.915306][T27352] __sys_sendmsg+0xe5/0x1b0 [ 2574.919904][T27352] ? __sys_sendmsg_sock+0x30/0x30 [ 2574.924926][T27352] ? syscall_enter_from_user_mode+0x21/0x70 [ 2574.930813][T27352] do_syscall_64+0x35/0xb0 [ 2574.935227][T27352] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2574.941114][T27352] RIP: 0033:0x7f2d0d66eae9 [ 2574.945538][T27352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2574.965145][T27352] RSP: 002b:00007f2d0abe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2574.973552][T27352] RAX: ffffffffffffffda RBX: 00007f2d0d781f60 RCX: 00007f2d0d66eae9 [ 2574.981520][T27352] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2574.989498][T27352] RBP: 00007f2d0abe41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2574.997460][T27352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2575.005432][T27352] R13: 00007f2d0dcb5b2f R14: 00007f2d0abe4300 R15: 0000000000022000 [ 2575.013402][T27352] [ 2575.016406][T27352] Modules linked in: [ 2575.020661][T27352] ---[ end trace 2a90cfa97aee247d ]--- [ 2575.026148][T27352] RIP: 0010:tipc_crypto_key_distr+0x218/0xa80 [ 2575.032239][T27352] Code: 02 00 0f 85 66 08 00 00 48 8b 45 00 49 8d 4d 20 48 89 ca 48 89 4c 24 10 48 c1 ea 03 48 89 04 24 48 b8 00 00 00 00 00 fc ff df <0f> b6 14 02 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 b0 [ 2575.051912][T27352] RSP: 0018:ffffc9001844f3f0 EFLAGS: 00010202 [ 2575.058189][T27352] RAX: dffffc0000000000 RBX: ffff8881703ff000 RCX: 0000000000000020 [ 2575.066208][T27352] RDX: 0000000000000004 RSI: ffffffff88b14ee7 RDI: ffff8881703ff040 [ 2575.074192][T27352] RBP: ffff888076790400 R08: 0000000000000000 R09: 0000000000000000 [ 2575.082214][T27352] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 2575.090231][T27352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000038 [ 2575.098263][T27352] FS: 00007f2d0abe4700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 2575.107241][T27352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2575.113837][T27352] CR2: 0000001b32022000 CR3: 000000016f291000 CR4: 00000000003506f0 [ 2575.121869][T27352] Kernel panic - not syncing: Fatal exception [ 2575.128208][T27352] Kernel Offset: disabled [ 2575.132524][T27352] Rebooting in 86400 seconds..