CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfffffffffffffff7, 0xc00) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000080)={0x5, 0x0, [], {0x0, @bt={0x43, 0x2f, 0x0, 0x2, 0x2, 0x2, 0x3, 0x481938eb, 0x6, 0x7fffffff, 0x9, 0x2, 0x3, 0x7, 0x1, 0x10}}}) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x1, 0xfffffffffffffd55}) ioctl$TIOCNOTTY(r1, 0x5422) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:20 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x48000000, 0x0, 0x0}) 03:34:20 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x48000000, 0x0, 0x0}) 03:34:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000080000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:20 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r2, r2, 0x0, 0x144) [ 536.981275][T26757] binder: 26749 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 536.981288][T26757] binder: 26749:26757 ioctl c018620c 200005c0 returned -22 [ 536.997552][T26754] binder: BC_ATTEMPT_ACQUIRE not supported [ 537.016231][T26754] binder: 26748:26754 ioctl c0306201 200005c0 returned -22 03:34:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:20 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x4c000000, 0x0, 0x0}) 03:34:20 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x4c000000, 0x0, 0x0}) 03:34:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000a0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:20 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='\x00\x00@\xa9q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\xb5\xd4\xb2\xc9\xf2\xb29I&\xa58>\xa0\xdaw#gW\x81\x84\xb5\xa4E%\xd0\x9b\x8c*\xa2\xcaz)p\x143\xff\xde\x14\xbb\x9d\xe9\xb3{\x89\xc3W3hgBI\x94\xac\"(\xf1\xd8\x8bs_\xda\ruQ\n\x8f-\xb2\xb0S\x95J\x87#%p}S\x1a\xee\v~\x17\xfcP1\x9f,e\xbbK\x1a\xbfQsm\x1c\xf6G\xf9#\xd3\x86\xa0a\xf4]Rt\xe4\x14\x90\xf9\vB\xd33\xfc\t*`\xeb~]\x92}\xa3r\xb9\xc7\xb3I\xfae\x9bM\xaf\xda\xc5\x8b\xffG\x88\xf0>\xf2\xfa\xbc\xcebZ\xe7\xf5=%\xdbH\xb4n\x03\x9ayl\x17:\x8d\x89_\x82\xae\x95b\x91C2\x93\xf5\x86\xfe\x00>L\xce\x83\x7f\x06m?d\r<\xb3\x048;l\xb86\x18\"\x94\x8f\xf5\xde\xbc[\xaf\xbez\x0ec\x8f\xfe0\xb1\b\x1a\x18D\a\xf1\x94Co\x97&Z?\xba\xcd\x13(\x9b\x7f\xc2\x90U\xb9<\x8f\x81\x02\x80\x12\x00Y\xc6i\x1f\x17\xec\xdd\xdb\v\xef\xcb\f\xe2[\xa2]4\xea(\xfaph\xd0\xef\x9a\xe71\xe1\x89\xbe\x16\xea\x1c:\x15\xb6\xd1\xf3S', 0x200002, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000080)={0x9, 0x1, 'client1\x00', 0xffffffff80000004, "b8d7557e255e28b8", "c0b4cf7770da8f89f27873d96387b55d981086888f64c84e10dc2e18890687cc", 0x42d877ac, 0x5}) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r2, r2, 0x0, 0x144) chdir(&(0x7f0000000180)='./file0\x00') 03:34:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 537.329659][T27088] binder: 27085 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 537.329672][T27088] binder: 27085:27088 ioctl c018620c 200005c0 returned -22 [ 537.360792][T27097] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2180, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000080)=0x1c) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 537.379659][T27097] binder: 27093:27097 ioctl c0306201 200005c0 returned -22 03:34:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000c0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'system.', './cgroup.cpu\x00'}, &(0x7f00000000c0)='./cgroup.cpu\x00', 0xd, 0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r0, 0x0, 0x146) 03:34:21 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x60000000, 0x0, 0x0}) 03:34:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xb8, 0x96002) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r2, r2, 0x0, 0x144) 03:34:21 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x60000000, 0x0, 0x0}) [ 537.600028][T27353] binder: 27342 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 537.600042][T27353] binder: 27342:27353 ioctl c018620c 200005c0 returned -22 03:34:21 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x8000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 03:34:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000e0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:21 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x68000000, 0x0, 0x0}) [ 537.776633][T27504] binder: BC_ATTEMPT_ACQUIRE not supported [ 537.794291][T27504] binder: 27448:27504 ioctl c0306201 200005c0 returned -22 03:34:21 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) rt_sigqueueinfo(r1, 0x27, &(0x7f0000000080)={0x2b, 0x2, 0x3}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x101000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000240)={{0x6, 0x1000, 0xffffffffffff6ff6, 0xffffffff, 0x293, 0x1}, 0x2, 0x7f, 0x6, 0x6, 0x3, "a0106dce871aad0144aa9e1c86dbc6c7a856c08a26c73ef6782ff649c67f39782a3c05da9f12fc0431536da2e4ee9687937153ad703c0bee8ca54444955ad29b33eef0872abea12161ac08c383205dda54b51f5e84d7415400e26f8a63836b64c12c5a9673be19e47ca2db82adb7cc70a5b11ee474a68611e6e9bfcbdc4dbc80"}) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x101) fchmodat(r3, &(0x7f0000000080)='./file0\x00', 0x40) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) 03:34:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000f0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 537.946846][T27630] binder: 27584 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 537.946860][T27630] binder: 27584:27630 ioctl c018620c 200005c0 returned -22 03:34:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, 0x0, 0x0) 03:34:21 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x68000000, 0x0, 0x0}) [ 538.002737][T27677] __nla_parse: 11 callbacks suppressed [ 538.002748][T27677] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000100000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:21 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) fadvise64(r1, 0x0, 0xb980, 0x3) 03:34:21 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa0, 0xffff, 0x3, {0x0, @vbi={0x7, 0x7fffffff, 0x6, 0xb5315258, [0xa0, 0xf3dd], [0x100000000, 0x4], 0x13b}}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f00000001c0)={0xfffffffffffffef2, 0x7f}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x60800, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x144) [ 538.170696][T27776] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:21 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x6c000000, 0x0, 0x0}) 03:34:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, 0x0, 0x0) [ 538.228637][T27776] binder: 27768:27776 ioctl c0306201 200005c0 returned -22 [ 538.267043][T27803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000200000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 538.337429][T27823] binder: 27810 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 538.337441][T27823] binder: 27810:27823 ioctl c018620c 200005c0 returned -22 03:34:21 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) fcntl$notify(r1, 0x402, 0x18) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000040)=""/64) [ 538.412724][T27955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:22 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x6c000000, 0x0, 0x0}) 03:34:22 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x24000, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2e, &(0x7f0000000080)=""/76, &(0x7f0000000100)=0x4c) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000000)={0x3, 0x8, [0x0, 0x8001]}) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188b07063d0c3e57d0fd781d7006194b540643caf97d22641974357f8032476fcd1074d4da2d7f415b4e5356c2a08") sendfile(r0, r2, 0x0, 0x5) 03:34:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, 0x0, 0x0) [ 538.470552][ T22] libceph: mon1 [::b]:6789 socket error on read 03:34:22 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x74000000, 0x0, 0x0}) 03:34:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000280000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:22 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = getpgrp(0xffffffffffffffff) r4 = getpgid(r3) ptrace$pokeuser(0x6, r4, 0x3, 0x3) sendfile(r1, r1, 0x0, 0x144) [ 538.630780][T28036] binder: BC_ATTEMPT_ACQUIRE not supported [ 538.654522][T28049] binder: 28041 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 538.654536][T28049] binder: 28041:28049 ioctl c018620c 200005c0 returned -22 03:34:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x10101, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f00000002c0)) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000080)=0x8b, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={r2, r2, 0xd, 0x3}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={r4, 0x5}, 0x8) [ 538.702242][T28036] binder: 28031:28036 ioctl c0306201 200005c0 returned -22 [ 538.732918][T28095] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 03:34:22 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x7a000000, 0x0, 0x0}) 03:34:22 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82400009}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffffffffffff}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) 03:34:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000003f0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:22 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x74000000, 0x0, 0x0}) 03:34:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2100000000000106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 538.990958][T28382] binder: 28372 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 538.990972][T28382] binder: 28372:28382 ioctl c018620c 200005c0 returned -22 [ 539.028758][T28384] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:22 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0xa0001, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x62, "0204eb9e487f56221edc07a23227c7c86f08177cd0233f2a509be404527ff64497faa37cbd009b5c63a8e37fc7fb796607ad33277f087739a0718f01dadc375f8d5f009dcecb655c70699206d383c817fda4e9f641a290a8da344b61d7fbf3a54c67"}, &(0x7f0000000180)=0x6a) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={r4, 0xff, 0x1ff}, 0x8) 03:34:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) [ 539.068984][T28389] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000480000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 539.124818][T28389] binder: 28387:28389 ioctl c0306201 200005c0 returned -22 03:34:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0xfffffe3a, 0xfa00, {0x0, 0x0, 0x106}}, 0x155) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 03:34:22 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$FICLONE(r2, 0x40049409, r0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80000, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r3, 0x0) sendfile(r1, r1, 0x0, 0x144) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000080)={0x8, 0x401}) 03:34:22 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x100000000000000, 0x0, 0x0}) [ 539.250033][T28512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 539.297879][T28512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:22 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x7a000000, 0x0, 0x0}) 03:34:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000004c0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 539.427430][T31865] libceph: connect [d::]:6789 error -101 [ 539.434030][T31865] libceph: mon0 [d::]:6789 connect error [ 539.450178][T28630] binder: 28622 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 539.450191][T28630] binder: 28622:28630 ioctl c018620c 200005c0 returned -22 03:34:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x400000) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x4, {0x81, 0x9, 0xebd, 0x8000, 0x100, 0x4c8}, 0x7, 0x100000000}, 0xe) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r2, r2, 0x0, 0x10000000000144) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {r3, r4/1000+10000}}) openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) [ 539.474543][T28641] binder: BC_ATTEMPT_ACQUIRE not supported [ 539.481145][T28641] binder: 28637:28641 ioctl c0306201 200005c0 returned -22 03:34:23 executing program 3 (fault-call:5 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e23, 0x1, @ipv4={[], [], @rand_addr=0x4c84}, 0x8bd}, {0xa, 0x4e21, 0x2, @local, 0x3}, 0x4, [0xe4ec, 0x3, 0x1, 0x3, 0x6, 0xffffffff, 0x5, 0x3f]}, 0x5c) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) r2 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x3f, 0x101000) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @broadcast}, 0x3, 0x2, 0x0, 0x2}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)="8de5156abee65bb41c85b1560554dd2e327494fbead7183923c915ea4c5d04770051f0caae5bddbdcfdae753951260bab1f449f3c1de03a03e8023df7e2ca006a89e156cf764b5f8d94dcbbaafe3c00a4d4a7e8b05e5dc98d773a2ae73c0950a0e1126913e2e98d3fb27b5981aec63f08bad64adcd8161a556372377664ec9a63d09a0b4132bf2d958c264c04116dd3aba6cb8d930434fcf7da8d41c36a3957bd45a4d6f1154b8d0bfd158d86835b10e1aa5d49d653f3833118db26339b9ce0badd210807d736edc850d36081ac050c5e66fb480", 0xd4}, {&(0x7f0000000500)="d69b07fc7902750864bd433f54d96cbe026f61a9d66e165be02e2a1cf6048ad80edd4b8eb8249166defc64778176ccc07996", 0x32}], 0x2, &(0x7f0000000740)=[{0x1010, 0x101, 0x9, "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"}], 0x1010}, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000004c0)={r3, 0x8, 0x800}, 0x8) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x440002, 0x0) execveat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000280)='cgroup\'\x00', &(0x7f00000002c0)='\x00'], &(0x7f00000003c0)=[&(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00'], 0x1000) [ 539.580758][T28728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:23 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x200000000000000, 0x0, 0x0}) 03:34:23 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x100000000000000, 0x0, 0x0}) 03:34:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000600000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x100000000001) 03:34:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 539.734298][T28862] binder: 28858:28862 ioctl c018620c 200005c0 returned -22 03:34:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000500)={@dev, 0x0}, &(0x7f0000000580)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001a80)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000001c00)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003000)={@empty, @rand_addr, 0x0}, &(0x7f0000003040)=0xc) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000003140)={0x0, @local}, &(0x7f0000003180)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000031c0)={@loopback, @local, 0x0}, &(0x7f0000003200)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000003240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffffe) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003280)={0x0, @local}, &(0x7f00000032c0)=0xc) accept$packet(0xffffffffffffffff, &(0x7f0000003300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003340)=0x14) bind(r1, &(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000003380)={'irlan0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000033c0)={@multicast1, @rand_addr, 0x0}, &(0x7f0000003400)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000003440)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000003540)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003680)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000003780)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000003d40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000003d00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="28050000", @ANYRES16=r2, @ANYBLOB="200129bd7000fddbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="7c00020038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040009000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000300f50008000600386a3e1786959ce69eef1aca79b775a25bf9865415ab1c371abbee4c0eb8fe0498407da8a3811aa6edee8e77ce4df69558c58b082245546c43b6892f60b492976c48f9f4d87368ffb40f10badf093c02cc80376635145ac4cdcff8e37968b85239194539dffeed6179077a18a7af974db9ce652f108527949f41978bb5b9364e43c44a04bbcfa2a2647cb0ca25f6c20411bd4912b2afd011fb50b276bb5b162fc498fe17d654ff0300004284aa01872971032bfab995e7e6926845e8205dc5ddbfba4651e6f7668afb4ac61487df92e20d2b4caf586c9fdb9c4f5d41aa1389e0ae6febe8783fd1fa4a696523b5146224e17de59bedc3273abebbb0c275b014de", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="6801020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004001f00000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b0000000800040060cf000008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004001300000038000100240001006c625f73746174735f726566726502005f696e74657276616c00000000000000080003000300000008000400ff00000008000100", @ANYRES32=r9, @ANYBLOB="2801020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000080000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400040000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="6801020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000300000008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400ffffffff38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000700000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f6164636173740000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000400000008000100", @ANYRES32=r16, @ANYBLOB="780002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040009000000"], 0x528}, 0x1, 0x0, 0x0, 0x80}, 0x8000) rt_sigpending(&(0x7f00000000c0), 0x355da2a02df6264e) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r18 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r18, 0x84, 0x4, &(0x7f0000000100)=0x5aa0f0e5, 0x4) r19 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) write$RDMA_USER_CM_CMD_MIGRATE_ID(r19, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 539.858402][T28962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 539.868057][T28979] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:23 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x300000000000000, 0x0, 0x0}) [ 539.904540][T28962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 539.908653][T28979] binder: 28934:28979 ioctl c0306201 200005c0 returned -22 03:34:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000080)) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) 03:34:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0x16, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 540.019852][T28995] binder: 28993:28995 ioctl c018620c 200005c0 returned -22 03:34:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000058650000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 540.060318][T29028] Unknown ioctl 8840 [ 540.079704][T29062] Unknown ioctl 8840 03:34:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="39000000130009006900000000000000ab0080480b00000046000107000000141900040000000000010003f5169dcd4a77282b0bdca4000000", 0x39}], 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x2) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000580)={"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"}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0xfffffffffffffe22) 03:34:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101040, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000240)={0x10001, 0x4, 0x401, 'queue0\x00', 0x5}) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x1, 0x4840) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r2, r2, 0x0, 0x144) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)) 03:34:23 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x400000000000000, 0x0, 0x0}) [ 540.187222][T29231] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 03:34:23 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x200000000000000, 0x0, 0x0}) 03:34:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000680000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 540.290510][T29327] binder: 29299:29327 ioctl c018620c 200005c0 returned -22 03:34:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200040, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000080)=0x1000, 0x4) 03:34:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x200004c8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000001b80)=""/87, 0x57) ioctl(r2, 0x1000008912, &(0x7f0000001b00)="0adc1f123c123f3188b0705fef89841e08f249dc7528dc44f70ae65fd5055909338ede97e320940151bf5eaf6088fc605df613a3cc9301585fdec88b7d1628b12fd2a0aad08b067cb7b4d22670444181d599a970b1bf598577eb") r3 = semget(0x1, 0x4, 0x400) semctl$GETPID(r3, 0x6, 0xb, &(0x7f00000007c0)=""/4096) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x2000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000017c0)={{{@in6=@ipv4={[], [], @initdev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) getresgid(&(0x7f00000018c0)=0x0, &(0x7f0000001900), &(0x7f0000001940)) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x8000, &(0x7f0000001980)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}], [{@dont_measure='dont_measure'}, {@seclabel='seclabel'}]}}) sendfile(r1, r1, 0x0, 0x142) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001ac0), 0x4) write$binfmt_aout(r0, &(0x7f0000000240)={{0x0, 0x3, 0x100000000, 0xf, 0x50, 0x1, 0x137, 0xef}, "3c0185a90a1158cf8b70aa5b3ad053df3e9191c0b8d5f458d1b1523bfa175092448f649c7ce858b24c385e3ca0511f19f81cde0b391c34c9df32c51c2d7a17b99153bee6a3eb0c3d91d10a6f3c1d59dafd1617f37867e8972e6868b35c", [[], [], [], [], []]}, 0x57d) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0xa003, 0x0) [ 540.386455][ T7892] libceph: connect [d::]:6789 error -101 [ 540.386780][T29369] binder: BC_ATTEMPT_ACQUIRE not supported [ 540.392232][ T7892] libceph: mon0 [d::]:6789 connect error 03:34:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000006c0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:24 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x500000000000000, 0x0, 0x0}) [ 540.503992][T29369] binder: 29368:29369 ioctl c0306201 200005c0 returned -22 03:34:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000040)={0x0, @local, 0x4e22, 0x2, 'lblc\x00', 0x4, 0x3, 0x27}, 0x2c) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x100, 0x0) write$P9_RLERROR(r3, &(0x7f00000000c0)={0x12, 0x7, 0x1, {0x9, '\'bdev\xe4em0'}}, 0x12) sendfile(r1, r1, 0x0, 0x144) 03:34:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0x7, 0x2, 0x2, {0xffff, 0x2, 0x400, 0x81}}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) sync_file_range(r1, 0xffff, 0x8000, 0x2) 03:34:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000740000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 540.654999][T29587] binder: 29508:29587 ioctl c018620c 200005c0 returned -22 03:34:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x200004d0, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:24 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x300000000000000, 0x0, 0x0}) [ 540.721111][T29692] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 03:34:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000007a0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 540.788262][T29758] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 03:34:24 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x600000000000000, 0x0, 0x0}) 03:34:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80040, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x4, 0x4e02, 0x0, 0x1, 0x800, 0x6, 0x9, 0x8, 0x80, 0x7, 0x4, 0x7, 0x2, 0x7, 0x2, 0x4}}) set_robust_list(&(0x7f0000000440)={&(0x7f0000000380)={&(0x7f0000000340)}, 0x2, &(0x7f0000000400)={&(0x7f00000003c0)}}, 0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r4, 0x1f}}, 0x10) sendfile(r1, r1, 0x0, 0x144) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000100)={0x0, @aes256, 0x2, "2455c97c41a5e2e5"}) 03:34:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0) [ 540.877254][T29790] binder: BC_ATTEMPT_ACQUIRE not supported [ 540.910945][T29790] binder: 29789:29790 ioctl c0306201 200005c0 returned -22 03:34:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000810000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 540.995035][T29903] binder: 29875:29903 ioctl c018620c 200005c0 returned -22 03:34:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) 03:34:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x9, 0x189080) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x14, 0x20, 0x16, 0x5, 0x5, 0x3, 0x3, 0x5, 0xffffffffffffffff}}) 03:34:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00ffffa8880000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:24 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x400000000000000, 0x0, 0x0}) 03:34:24 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x700000000000000, 0x0, 0x0}) 03:34:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x801000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendfile(r1, r2, 0x0, 0x1000000000000144) 03:34:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00ffffff9e0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 541.280591][T30159] binder: BC_ATTEMPT_ACQUIRE not supported [ 541.307237][T30159] binder: 30158:30159 ioctl c0306201 200005c0 returned -22 [ 541.354353][T30247] binder_ioctl_get_node_info_for_ref: 5 callbacks suppressed [ 541.354360][T30247] binder: 30228 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 541.354369][T30247] binder: 30228:30247 ioctl c018620c 200005c0 returned -22 03:34:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa02, {&(0x7f0000000340)}}, 0x10) 03:34:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10600, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000002b80)={0x0, 0xbc, &(0x7f0000002ac0)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e24, 0x3, @local, 0x7}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x76, @rand_addr="42a66713e60c724a56633bb2693c3f8d", 0x3}, @in6={0xa, 0x4e22, 0x81, @local, 0x1}, @in6={0xa, 0x4e24, 0x6, @ipv4={[], [], @empty}, 0x1}, @in6={0xa, 0x4e22, 0x9, @local, 0x1000}, @in={0x2, 0x4e20, @local}]}, &(0x7f0000002bc0)=0x10) ioctl$int_in(r1, 0x5421, &(0x7f0000002c00)) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000002c40)=@assoc_value={r4, 0xb71}, 0xffffffffffffff17) sendto(r2, &(0x7f0000002480)="51501480", 0x4, 0x40884, &(0x7f0000002a40)=@llc={0x1a, 0x5, 0xfffffffffffffff9, 0x9, 0x3, 0x2153000000000, @broadcast}, 0x80) write$9p(r3, &(0x7f0000000180)="f82c268bdd49764a0fc1c922426ad81de479f9c40c925ed1948dc4a4087cc13ac8c7215d7e9a05c0aeaea7156c2e948f34e2f6073aacaa82863c8a71529c133a1f0cff8dc86680da9056054c1f876cdb", 0x148) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000024c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000002500)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000002600)=0xe8) getxattr(&(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000002d00)=""/31, 0x1f) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002640)={0x0, 0x0, 0x0}, &(0x7f0000002680)=0xc) r8 = gettid() r9 = geteuid() getgroups(0x1, &(0x7f00000026c0)=[0xffffffffffffffff]) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000002700)=0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002740)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000002840)=0xe8) getresgid(&(0x7f0000002880), &(0x7f00000028c0), &(0x7f0000002900)=0x0) sendmmsg$unix(r3, &(0x7f00000029c0)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000240)="ae120d1f2b93e9013aa9cae1d36c69588dff80a3f40074510ca8d1abf4944ea34271377c3a5fc00b0422f3a35ace9b2b4b62c6b20ba224f0561b228e2b423e635126baec6a1c89d6482a2fedf160ada5a3e2b8c4309bc9786f6937ed54dc65879ff6c72c603527741004b238e03850cfed56af75cba9a4f9f75fec93a6ec3396fea31385211e09c083e8f99f459c3963987faec5ac0cd1f8afddffa24f6e77624d85854a0ed67f40d836816e", 0xac}, {&(0x7f0000000300)="1d6e4df729855d8ad1801581ef86e3714c627e6b23422d7bb04c64ec810e030b088fe3d1ad3f66f1ad8e4ef16f0f4d5b178ee13dc39420dfbf9e5820cd984a7942d884e870a79d4329ef64e2f4f7f261dd7b1148cbc6ed40aa55c6165886a50e215dad88bf1fe93b090557ea22c86df8c97a3950008d87565f7db072858532253e55e80666c701e141a7cc2bbe3e881daea896de46f6b68a7737bd3896fa4df0682d376918f4390ff566f8bd16579a5850d4e861b0c4041cffe3acd8169102391ee6044c57ed98f565814a57613a789435f03c57ed46847fe15d7c80f36af5a1c8e7eaba4db1297627294f798f50dcafef457338b35459db9ed64bc8fe5c9876305394244f08712f0848c8b8c9894c7530f3394a9f9b2100f5b17efbf708b10227d4cab14349ccee8e014591120cec4c81529ea49bcf82d0caca73c7ea331ce0bae8226f01689c9da0fa661f412a17e47e038632908514cbd8b82447d8fc319f0b60024ed23c188a54e574d315e54e0c8ffbed048d0c3e71a7e4d1efa770cdc4fca321c1547c0872892a82cc7b59e52586fcc74a2644335c0dfe1f90ed2c4e5018dd474db149ff95b53fc2d5fd9c2df99f7b3a5695acde3a499f31d99083c1f2e650548c56b0385528a7b557ccaae0a57c8f1e8086b7aea3fa8775edb12fd6a4e098b7ee63906a75d6fc7f0bab36a959f3eea1d624693affbf52593c6af0fd8253d1fd38684e1ed24a080d381cdbc11f15271bc184842fe5400cfa019902d91b6286a3ae1649401bf8559e12a2e33c4701cbe750d361528d7277fbe4d6af4650e501016451a7a07a80a7ca151759ab7e2d406d6d7ed7e7dd75d67cd4cfbe803453cbfaafb8ed10e64ced3a13cdbc6d7e028acb2591ffb8c9d7b8d1f6e119f1569b72cd9a43f3feecfff5d640fff4cce552dee0e556755cc810e14b5064c5d327fd0be437f2c3875d4c71e01487e08d2ccc2a2512139f8aaaea7c551b5ba3ab4e574d03fa767fe7e73fa18a53a2fe7b8b6c1fa05519dd0698d3d91a3addffd01ffa649684488798ef4ac7b3332c3a4d854d7777fde5191ae1ac93351605f92612872a58b9ca5e783066b710709405494e563c32adfd6d6b1db5f6e024ca1f15e0061a7373af1d7a95678a645c3c11970f0c9fde91f49bc8217874d5917c9785052feb853402fcd87ab7c1f18b34b35f35955839b4b8aa823e51cb6fc972afcfdbd2c264bd76ef07f0263e8e465e1b34b1288c16994adaed0697cae9311c7fbe9552cd3c0e6f5dee47cb1c4ae403cd6672a93a17686ac5c4c8b672bdc1741bd586cd754de24df313fcc277018d7b7baa522a833e74bd078f5f1671b9b910b97f998ccf79f84f2c2ade8f5f4f6a00aaaf3a4944529107b4f08fcc119031c46fc2782e8ee1f5d2225090c255a59594c224571bc2afbcc87ce4a6ed6a57a15f7a8b666294c42847e5afd0216e6933b233f2c68dc281ed65a899c2cf9790a1f356f72f9eaac8885e35c293c56a4eaccfabc4926f249bfa2a5dc0741ddc78168b13b677a8c38e42215f109e1df88081c726f178f3d0c1aa9e3cfb97cd10fe5c7b3235b2069391a203d77dcd465e048ca434cfe503ed84e842a5d547fd2040274838379738cb3b2de38af5e65b36dc8b1459c7bf603a1e0f70c2ea61bfc6002193491d4b74aa9e68100a40446f8088d41a1f9a03c63be3ccba35d089d23f4cd14bfbb0fd1e2532f662ceeddb4d508586767e38822457f50af808f6019760553083f1004aac16df968405a0f084a2529026905515570f73376b2eea60720da5095a67e9226200f9a28050d93117ce7fdf81eda7579088a7d7c8d18f9a4c768ac5d65d81491491bdf76d4d90d96459eb329f6fe1644f3e00e26665ce966ddfa52bac9fcabff706a9e381c34c0b3bd010a450d99803ee1fc1745b3c40bd32530e867aee3879a34b898c08166c614fdd809361c4808cee39418e0f6ef532c42683cfabba14d5ff77613305bc3b3cd2617c7d39df474436165c30c8abab6d5a31c75923995ef6aae66e200b493ca122b05135d4f27eb2a3ae5e571293499110df49fb83eafb6dc52af959bbc125f6c86185aaed80acd98a34be7dd04fd485a53681a10535148a4f60666468e74fc11de24558fde964a985c47f495c48ce57634264c6abfb17228ba4f1c12a7e2aadd8749a208504ba14a5a175b6a90fb0efa2d1888f99018733270a81f704f2b01ef99be18a6f8598ca8e6622c4ac5ddc5ceaf48ab0a261e70ff33134d204b6f690eb127539edd1f7e681a6c3725f66693a769271701fdb40fb97b24808590b0c622c9c86c1b96db5c53b2539ef35a2d93cf9df7e73e959f41f37b6c29fc4d202ba9d12d3527a704c84fa9a718b90c63058194a770890ef56f008c5587e8fd94ac966dab28f7f151152c66c900c5d06e10ab2210ccc670aa485463550622e8f608ff0146bee2f52cffe5b4a133bff910922170889cde22517e4a4c561a107c6352fbb82c295fbccf475c46d6fd62652480f881e03d9a21a35d954232c8f539c8c3dd8ec167ee646fede5e6f70acf7fb08fdec2445e61c3502d839d897d78496eafe402757fe0ed183ab8b1c1479fffaf4477f4ecb647c70d045e16dfca6ca4c4e61ff3c84b140f7773e1f67689f00ef17699e911bcfa0d7f35ae77b4843c339978109f572f35dc633d0843f8a10dae9a558d8b6615c1e3ab7c957f81ca73cc57b3d95e5121de2cabd435e3798280592686f9a423e80f2452f438aa37ef34fddd26b2929efc8e229f2450fca39b4bad0967d1d74612c7eb78eb59e50f99923ca6830e732b46d91e79693be87c360d123c224b673e417a84328cf76bc7d19f73bcddb849485c2ad2a694efb01f62a4db334906083dce52e5ac29f5b338e7a1f63f46bbfda53d7cc20cdd987b37a3f229d2d9d1d22e79a69e2b3c40858c82c6d1df2d05f72cf3267c80e8c0df8556827591c9034c1c95d33225cd30bf1807c604fbc1229c5a7c94ee11a550960b658ef98a4b1a3630330ac581a03e31128931d2b9df0dd39b2a1d45aeb98fb5c31f2537329395291850bf4e5fa5adb05368e038a089ef4b941d1e2b704453079bdc804182265322095b57fcad9b17492099ddffb225482107b2b51e92bb0e94d16de59b81749fe9b990fa322258af757d392bfc732c21aa3351a9a337dc9dad83f2e3bfc06621065a59dc68506cd4980278732d3de5f378ac55e87f4c82369e7480ee02893e626fc9d16b2031a721354808503987d9a6b13135bfa40ac890cec40eb81016da68ccba7bae271a5140ed815a8ce822c1eb2891017ed38e10f0e1c93c8bd77400ad9e840b2587eadb3526f9a5d2e5d89d812f657c529289720407bc8a7cfa85e45302d9e49e483ba6e7835ef0af57cd67c9dbae2ea77ab36797254bd208f26298a142320ced6d63325709234b6883d716961aa9094dc78908576ef7e3589f7d288edc01ebd42b2fce5b22c208715537a21a2b7d1d6adf709f918dd310a8df764c1e69de01c034443122c3291d917f13a203e708ef7d5d6f3a9c98268ad7b65200a787c00545451fdd5c2f77f7bf4b73a9c472283886784c96405e2a92d199b4378a2750ab8a4b63852c7e8da97ebb393bd1015c4803fa5492a3d4c093b5599169a0ecc40921388f54ad9058563b6ea3154d8413938a27804649bd138e6cb91a7e39196a0b95a150757cb8c368b038b53c49e5fabedddc1cda9b5489ae81162eeea5beedc861fecc8f354cef5e80ac3131d1f84046a69b25c4222f37411a72319f39f85544ccc2b6f3fd13b812b3d81f688fce4568797e563411dc6fa5b10a5cea62b2b07c4b6384b9b77f76bdf844609fc4d94896d9f5c0805466985101fba041d85a6e87e2ec8faec0a41714f362ae742fa983fb477efdd3f6f5d24e44d412b8cb2c47b83dcd031ceae00116b37830314c4b94de30b59962d4f7fbf8494161d6cbcdcd8025241353df60e8089293cefc5891ea15ca1cf6722a0ddc6344f03fc9158a92467a2642f418110dfc902885b303e44e7dac59152d0221834c160bc4c41ba7edeffbea8464de4c3586abaaaf1df6d57f528ae2339713e139a16b3977279c13c755df1f734e0fd35ce9d808efc59fd6f4ad6c6cb75d5df94ba77e9776aa0e9c63ee6db0fc66b1a379c4394d441cb7caf9c4184ae3a7e5b65033ea27e8ccf713c96ae064598b6b0b82329b8997de19c82f031ed4e598b173f9e3a87e28c3a29ebdd6df159cb813b35747b8cf536a2d768905f2964416c41c86101755fb4fc651b67158bab144ed2a314ad22beab8c36435858fb6c55a7be2d359b630a0bf0d4e2779095083f495a7006d5d70e37bf238eb286f95c3a4e1b28190d808efed563693aa4a0e5e2935432b6de2589243b02e7a1fa3e960df9c3eabd5b2e2393d4ac3f983b2bc36614c7a29328789a5994643e074684870d4b308ef07205fe239354780f99dfe675005a19aa86ca4754828f85bcb4023a22712d0770243797290b263d015e5fbc164fdb64f770621acc43e122ffe05fdf74623c521e68d43cb8d3621d69f7578c05060a92f007caf5422a2e1c2a7370d3ee4dff4aa0358ba783d9d078080f1db641ad5a0c27a8fe9b00abbe2e5647204e9bed74b0471c9ea6e9d5272cb45d8a99a313a7c2f39f836ce8b1e0bba2fffbefec3214cdff2552f165d6b73d070f914608cc9e290cbae16d0659855e5016ec9e0d85b3e080268fdc2cbd660b0ce04ef449458f8d774f3768d0f86ea21db2937e2552f17916041f5016d7ff7d6a7dca6f65bcfad456f5df3137578dfa22a495c2f0b5938726273e950715703c415a88bac5045ab0171aaef5c3acb1f5d4b169470816de204dfa8ac6d8ac2cb4ed5e18327ba4810dd073ac93c7684f0d18c7efb18c39670f26582daf5b87c1bf22bd89a62d592695bdd912c51b262a5845171a91fe441aa5a9a49e3c6f0466a47a1b6ba4b4ec83cde821c3870081481b4fcfdb938b204115841020683be972fc153157e6b9b52510f3dcf1e0726585c46e380bc517ff79ab01961d0f3c5aee766aa84493a59cea38f6b8bed0d20159a76ff55dead21f0c3c64949d6da7304462cc416fb81f49bb285b0d1cc67e0425f66b354590608a0df08eedaeec653614d5b8a95da8ccf7f6062739c2cbdc4c1a57d666e9201723e92f6fb9ffea220c3a048ab8acd40b4b269a5cfd3676552ba323c23bb6c208e02c73be98a8acca2715ec9a75974cda5d4895ff7284ae01da94cdae2bf5262c3e8e3f68ff963f6773a7e849448a56c654dbfb379ef38643c0c6c906a74497f15ee71707c3d73559709e3af124fd8f91585dc52c73ebf2bffe8923587d568d16e2f3f4f21fb8ed9227bf4a79af8cf1e267853986e62bedab1d0c71dd7511cb49f5084478c818a9b3d583eebbc5c511cc229269b2cb8c60396b7618eada7c33e1a4e78b6d815f42a9a27a62b78cab9f982d2c33e563309e19655e9baaec8f0ba594f90245fab4059ca630d954f6cfe9a3084d01901159979e45f2b6d5b39849dae1c4f52c792a28a1948a226767acf2edb54df6ea51260644a76b8a1a7756ba5abf2ba6c1ecd96233bb36b003112fff08976ea4c2f50078a539ca329f2ef4bc9eccd65f991fc29a850158fe4a799b5ae32613e4354731ce97f46eca8cde067b0c5adb01237634fb9cb3fd07238e610a9b4b0efe31b6b89be10b6673ec5b6b06a67079aabfb639c49febb2768271afd13198efc4679eb37f55e235d7116961192b4a76ab92b49587756ddc2e2f671b3f246f", 0x1000}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="25f783c6b004eac4358072b22cde1a106122495aaa4d2bb666d76580883a322f8daba597e4724569e1cf04b278cb82062576dd7e70dc44c12c47d8ae117f3927c56da73e90711234fa66242871b6a936b342e87e2a8935a0f4f96047a304af6acf369e20a3efb2f86ee29282ca6948daa5742395605f45c7ac26bf2b6f11a64ccd324b6dea47b01b1442f72264d1faf478b82b56ae3225a5923d86728616c99e6d", 0xa1}], 0x4, &(0x7f00000023c0)=[@rights={0x18, 0x1, 0x1, [r2, r0]}], 0x18, 0x80}, {&(0x7f0000002400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002480), 0x0, &(0x7f0000002940)=[@rights={0x20, 0x1, 0x1, [r1, r2, r3]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0x80, 0x4004801}], 0x2, 0x40) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adcdbb8b94808b9f1479ecabd6258058fadce1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000002d40)={{0x2, 0x2, 0x1, 0x80000001, 0x6, 0x2}, 0x7, 0x7, 0x6e32, 0x5, 0x1000000000000, "2315022df02ed76ba9c0bd60c14e14aacc4b89d9a8c44a5928b537882be74efce6a50d1dcfa3a995d2bf69409ec25da16d81069cae19a089cdb4b67294f022cee86f5b022f1204b9b2ff2025768d72b1582fb1f195399feeeecb04e7448f6af90b0daa7e88222afe83f733e183e5c8d5004fc1b1d5d8d75dfc8a3796a78f1568"}) 03:34:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00008000a00000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 541.447282][ T17] libceph: connect [d::]:6789 error -101 [ 541.453111][ T17] libceph: mon0 [d::]:6789 connect error 03:34:25 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x500000000000000, 0x0, 0x0}) 03:34:25 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x2000000000000000, 0x0, 0x0}) 03:34:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) 03:34:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000ec00000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:25 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x23, 0x9, 0x100000001, 0x5, 0x4}, &(0x7f00000000c0)=0x14) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000180)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e24, 0xffff, @remote, 0x7}}, 0xc135, 0x95cc, 0x3, 0xffffffff, 0x3}, &(0x7f0000000100)=0x98) [ 541.674444][T30490] binder: BC_ATTEMPT_ACQUIRE not supported [ 541.694285][T30567] binder: 30542 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 541.694298][T30567] binder: 30542:30567 ioctl c018620c 200005c0 returned -22 [ 541.713917][T30490] binder: 30487:30490 ioctl c0306201 200005c0 returned -22 03:34:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00fffffff00000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)={0x0, 0x0}}}, 0x10) 03:34:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x6, 0x22000) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x404000, 0x0) accept4$rose(r2, 0x0, &(0x7f0000000080), 0x80800) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000240)=@ng={0x4, 0xc, "e824652e025c18e20c9750ea04674f"}, 0x11, 0x2) sendfile(r0, r0, 0x0, 0x144) 03:34:25 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x600000000000000, 0x0, 0x0}) 03:34:25 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x3f00000000000000, 0x0, 0x0}) 03:34:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000fb0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x2400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000240)="676a6b96c28d47c37287189deffb79f4dcb1b45462ef94fdf0feddaeab4f999e3876ea1e884d16aba44984a963787c47297b611f04be63cb681fc9d7de420ab23d7d315246e7c808b2b4217e402495"}, 0x10) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) setsockopt$rose(r2, 0x104, 0x5, &(0x7f0000000000)=0x5, 0x4) [ 541.981645][T30821] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffffffffffffff0a, 0xa0000) getsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 542.029421][T30821] binder: 30819:30821 ioctl c0306201 200005c0 returned -22 [ 542.044276][T30864] binder: 30850 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 542.044289][T30864] binder: 30850:30864 ioctl c018620c 200005c0 returned -22 03:34:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0088a8ffff0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)={0x0, 0x0}}}, 0x10) 03:34:25 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x700000000000000, 0x0, 0x0}) 03:34:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000000c0)={0x12, 0x19c, 0xfa00, {0x0, r2, r0}}, 0x18) 03:34:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000f0ffff0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:25 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x4800000000000000, 0x0, 0x0}) 03:34:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e23, @empty}, 0xc0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='yam0\x00', 0x6, 0x101, 0x400}) [ 542.323767][T31176] binder: BC_ATTEMPT_ACQUIRE not supported [ 542.367188][T31176] binder: 31159:31176 ioctl c0306201 200005c0 returned -22 03:34:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f007fffffff0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 542.454001][T31232] binder: 31228 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 542.454015][T31232] binder: 31228:31232 ioctl c018620c 200005c0 returned -22 03:34:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xb, 0x42) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) bind$packet(r1, &(0x7f0000000240)={0x11, 0xc, r2, 0x1, 0x401, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000180)={{0x2, 0x0, 0x3ff, 0x3, 0x6}, 0x192, 0xffffffffffffff7f, 0x1}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)={0x0, 0x0}}}, 0x10) 03:34:26 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x2000000000000000, 0x0, 0x0}) 03:34:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000240)={0xffffffff, 0x3f, 0xd6a, 0xdc4c}, 0x10) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffb000/0x3000)=nil, 0x100, 0x4, 0x80, &(0x7f0000ffd000/0x3000)=nil, 0x4}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) getpeername$netrom(r2, &(0x7f0000000180)={{0x3, @rose}, [@rose, @default, @remote, @null, @default, @rose, @netrom, @rose]}, &(0x7f0000000100)=0x48) 03:34:26 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x4c00000000000000, 0x0, 0x0}) 03:34:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f009effffff0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x14441, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000080)={0x0, {0x6, 0x1}}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) [ 542.787523][T31529] binder: BC_ATTEMPT_ACQUIRE not supported [ 542.803654][T31555] binder: 31532 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 542.803668][T31555] binder: 31532:31555 ioctl c018620c 200005c0 returned -22 [ 542.835792][T31529] binder: 31503:31529 ioctl c0306201 200005c0 returned -22 03:34:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)={0x0, 0x0}}}, 0x10) 03:34:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) 03:34:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00f0ffffff0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:26 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x6000000000000000, 0x0, 0x0}) 03:34:26 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x200000) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f0000000240)="3a7a35e47b5a2b1c9f5e685765f0840c5ab0cb95384bd802342fe600f262616b2fe5f6a2378f6466c645359c8444b7c26d763e32960a7b630f019e6e73b0430d42c09d3cae445debc16dc1d24ff4d2299092e45fbb0f3501e6e799f23d12cb2ae25d07a852083b0d8298ce252c301e403630db357647ae057dd6d3531a7cc943c9bcbad63861c5705bddc9a7048d23ed33eb1622f0e1") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_out(r2, 0x5460, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x80100) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, r3, r1}}, 0x18) 03:34:26 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x3f00000000000000, 0x0, 0x0}) [ 543.097571][T31842] __nla_parse: 17 callbacks suppressed [ 543.097581][T31842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x6) [ 543.212751][T31941] binder: BC_ATTEMPT_ACQUIRE not supported [ 543.217111][T31924] binder: 31885 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 543.217124][T31924] binder: 31885:31924 ioctl c018620c 200005c0 returned -22 [ 543.229549][T31941] binder: 31884:31941 ioctl c0306201 200005c0 returned -22 03:34:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)={0x0, 0x0}}}, 0x10) 03:34:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1, @mcast1, 0x3}, {0xa, 0x4e22, 0x80000001, @ipv4={[], [], @broadcast}, 0x4}, r2, 0xe39}}, 0x48) 03:34:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000200000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:26 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x6800000000000000, 0x0, 0x0}) 03:34:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)={0x3, r3}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) [ 543.433546][T23889] libceph: mon1 [::b]:6789 socket closed (con state CONNECTING) 03:34:27 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x4800000000000000, 0x0, 0x0}) 03:34:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x7) [ 543.515526][T32280] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 543.547070][T32289] binder: 32287 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 543.547084][T32289] binder: 32287:32289 ioctl c018620c 200005c0 returned -22 03:34:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) r2 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000280), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r3, 0x3}}, 0x18) 03:34:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='security.SMACK64\x00', &(0x7f00000003c0)='securityuser(-\x00', 0xf, 0x3) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000240)={@mcast2, r4}, 0x14) accept4(r2, &(0x7f0000000400)=@caif=@rfm, &(0x7f0000000000)=0x80, 0x800) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000280)) ioctl(r3, 0x3, &(0x7f00000000c0)="0a090002123fba361531") setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000002c0)=0x2, 0x4) sendfile(r1, r1, 0x0, 0x144) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000300)={r3, 0x1, 0xfffffffffffff000, 0x10000fffff000}) 03:34:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000300000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 543.728835][T32328] binder: BC_ATTEMPT_ACQUIRE not supported [ 543.734715][T32328] binder: 32310:32328 ioctl c0306201 200005c0 returned -22 [ 543.754036][T32408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:27 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x6c00000000000000, 0x0, 0x0}) 03:34:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x20000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000080)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x144) fsetxattr$security_evm(r2, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "ae14414bf89a00dc6f8f2dd2ec2bc7b2"}, 0x11, 0x0) 03:34:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000400000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x200000) r2 = socket$inet6(0xa, 0x3, 0x9) dup3(r1, r2, 0x0) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x200004d0) [ 543.890378][T32597] binder: 32590 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 543.890393][T32597] binder: 32590:32597 ioctl c018620c 200005c0 returned -22 03:34:27 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x4c00000000000000, 0x0, 0x0}) [ 543.964261][T32635] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x41, 0xffff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x6}}, [0x8001, 0x4, 0x40, 0x3, 0xffffffffffff8000, 0x5, 0x8, 0x101, 0x7fffffff, 0xffff, 0x2, 0x8, 0xffffffff, 0xbc, 0x20]}, &(0x7f00000000c0)=0x100) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x1c0a2f6d) 03:34:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000500000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:27 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x7400000000000000, 0x0, 0x0}) [ 544.086745][T32707] binder: BC_ATTEMPT_ACQUIRE not supported [ 544.121025][T32707] binder: 32680:32707 ioctl c0306201 200005c0 returned -22 03:34:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x294000, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r2, 0x0, 0xfffffffffffffffa) [ 544.233908][ T402] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 544.252910][ T423] binder: 408 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 544.252923][ T423] binder: 408:423 ioctl c018620c 200005c0 returned -22 03:34:27 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x6000000000000000, 0x0, 0x0}) 03:34:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000600000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:28 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x7a00000000000000, 0x0, 0x0}) 03:34:28 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x1) getgid() r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r2, r2, 0x0, 0x144) [ 544.507720][ T691] binder: BC_ATTEMPT_ACQUIRE not supported [ 544.533896][ T719] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x104, 0x5}}, 0xfffffef3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f00000000c0)=0x9, 0x12) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:28 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x1, 0x200000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0xffffffffffffff82, 0xfa00, {0x0, r1, r0}}, 0x18) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="ff7f00000000000007000000000000000200000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="000000005c1d000000000000000000ff010000000000000000000000"]) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 544.574175][ T691] binder: 657:691 ioctl c0306201 200005c0 returned -22 [ 544.594875][ T725] binder: 724 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 544.594887][ T725] binder: 724:725 ioctl c018620c 200005c0 returned -22 03:34:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000700000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x80) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x101000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x701, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmmsg$inet_sctp(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x310, 0x0}], 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgrOup.cpu\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) write(r6, &(0x7f0000000040)="c148450f12e3abef94ff41b42cd0a0fea5701982dc029496eaf197d90f7a590762be1b375e0803da7e84855c1be3c473ac32d413b0ca3be67fe6772f7eaf9e524bd0304a0b94167940c9da6b8663720c44feacd7dda6692381fca3ec3710d617dba435be0d5f32ec3f373c97a18463d2e04a88019070b6365c78acdb199c0063702f127e6a2dd0ef32e2b8d7faffc3caad87636d5acc2c2b63", 0x99) ioctl(r6, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r5, r5, 0x0, 0x144) [ 544.756538][ T829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000800000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x200003) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:28 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x6800000000000000, 0x0, 0x0}) 03:34:28 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x2, 0x0}) 03:34:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x90080) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200800, 0x4) openat$cgroup_int(r1, &(0x7f0000000180)='cgroup.clone_children\x00', 0x2, 0x0) nanosleep(&(0x7f0000000040), &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") pkey_alloc(0x0, 0x2) sendfile(r0, r0, 0x0, 0x147) 03:34:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0xfffffffffffffe8f) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 545.160107][ T974] binder: BC_ATTEMPT_ACQUIRE not supported [ 545.192499][ T980] binder: 971:980 ioctl c018620c 200005c0 returned -22 03:34:28 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007800)=[{{&(0x7f0000000080)=@rc, 0x80, &(0x7f0000000180)=[{&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000002280)=""/209, 0xd1}, {&(0x7f0000002380)=""/130, 0x82}], 0x4, &(0x7f00000001c0)=""/44, 0x2c}}, {{&(0x7f0000002440)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002a40)=[{&(0x7f00000024c0)=""/175, 0xaf}, {&(0x7f0000002580)=""/22, 0x16}, {&(0x7f00000025c0)=""/158, 0x9e}, {&(0x7f0000002680)=""/167, 0xa7}, {&(0x7f0000002740)=""/116, 0x74}, {&(0x7f00000027c0)=""/249, 0xf9}, {&(0x7f00000028c0)=""/91, 0x5b}, {&(0x7f0000002940)=""/255, 0xff}], 0x8}, 0x1}, {{&(0x7f0000002ac0)=@l2, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002b40)=""/222, 0xde}, {&(0x7f0000002c40)=""/96, 0x60}, {&(0x7f0000002cc0)=""/205, 0xcd}], 0x3, &(0x7f0000002e00)=""/188, 0xbc}, 0x4}, {{&(0x7f0000002ec0)=@ipx, 0x80, &(0x7f00000040c0)=[{&(0x7f0000002f40)=""/106, 0x6a}, {&(0x7f0000002fc0)=""/221, 0xdd}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x3, &(0x7f0000004100)=""/24, 0x18}, 0x80}, {{&(0x7f0000004140)=@alg, 0x80, &(0x7f00000053c0)=[{&(0x7f00000041c0)=""/83, 0x53}, {&(0x7f0000004240)=""/61, 0x3d}, {&(0x7f0000004280)=""/236, 0xec}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/23, 0x17}], 0x5}, 0x913f}, {{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000005900)=[{&(0x7f00000054c0)=""/58, 0x3a}, {&(0x7f0000005500)=""/145, 0x91}, {&(0x7f00000055c0)=""/139, 0x8b}, {&(0x7f0000005680)=""/19, 0x13}, {&(0x7f00000056c0)=""/93, 0x5d}, {&(0x7f0000005740)=""/228, 0xe4}, {&(0x7f0000005840)=""/129, 0x81}], 0x7, &(0x7f0000005980)=""/20, 0x14}, 0x8}, {{&(0x7f00000059c0)=@ax25={{0x3, @bcast}, [@null, @remote, @bcast, @remote, @rose, @bcast, @netrom, @rose]}, 0x80, &(0x7f0000006d40)=[{&(0x7f0000005a40)=""/212, 0xd4}, {&(0x7f0000005b40)}, {&(0x7f0000005b80)=""/218, 0xda}, {&(0x7f0000005c80)=""/32, 0x20}, {&(0x7f0000005cc0)=""/27, 0x1b}, {&(0x7f0000005d00)=""/4096, 0x1000}, {&(0x7f0000006d00)=""/56, 0x38}], 0x7, &(0x7f0000006dc0)=""/112, 0x70}, 0x101}, {{&(0x7f0000006e40)=@alg, 0x80, &(0x7f0000006f80)=[{&(0x7f0000006ec0)=""/158, 0x9e}], 0x1, &(0x7f0000006fc0)=""/199, 0xc7}}, {{&(0x7f00000070c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000007380)=[{&(0x7f0000007140)=""/18, 0x12}, {&(0x7f0000007180)=""/128, 0x80}, {&(0x7f0000007200)=""/117, 0x75}, {&(0x7f0000007280)=""/210, 0xd2}], 0x4, &(0x7f00000073c0)=""/42, 0x2a}, 0x3}, {{&(0x7f0000007400)=@nl, 0x80, &(0x7f0000007740)=[{&(0x7f0000007480)=""/43, 0x2b}, {&(0x7f00000074c0)=""/141, 0x8d}, {&(0x7f0000007580)=""/232, 0xe8}, {&(0x7f0000007680)=""/132, 0x84}], 0x4, &(0x7f0000007780)=""/74, 0x4a}, 0xe3}], 0xa, 0x10101, 0x0) sendmsg$can_raw(r0, &(0x7f0000007b40)={&(0x7f0000007a80)={0x1d, r1}, 0x10, &(0x7f0000007b00)={&(0x7f0000007ac0)=@can={{0x2, 0x38, 0x6, 0x3}, 0x4, 0x3, 0x0, 0x0, "864e030cb0591909"}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r2, r2, 0x0, 0x144) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) write$vhci(r4, &(0x7f0000000240)=@HCI_EVENT_PKT={0x4, "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"}, 0x1001) 03:34:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x424002, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 545.204828][ T974] binder: 973:974 ioctl c0306201 200005c0 returned -22 [ 545.229176][ T989] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000a00000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 545.427678][T30288] libceph: mon1 [::b]:6789 socket closed (con state CONNECTING) [ 545.446243][T30288] libceph: connect [d::]:6789 error -101 [ 545.467102][T30288] libceph: mon0 [d::]:6789 connect error [ 545.501886][ T1229] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 545.539342][ T1304] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) socket$caif_stream(0x25, 0x1, 0x3) r2 = add_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000580)="2e42e70e8023631ca0f3c1f94b40d01c9f71691b5cb444c6143e92a3ad3bf2124889e1763245ec68eedf8b1a095719af61f428f2a074461dad529a52fcfb6bd8bb4a9dc3210367305363b568e48e83b1ee3fd788ebb3b00bd1375599ad498c9d342b1d8c414c19f63147b29085020bd3953c493f0455f1b100754fe015b48580e1a320aed401e26efbe6820ec146a97f85ab3436bcbb171af62f26b1e36865fee7b416f554ac7628e7e9cbb7fb1d124c8d22e80a9e", 0xb5, 0xfffffffffffffffc) keyctl$read(0xb, r2, &(0x7f0000000640)=""/151, 0x97) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:29 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x3, 0x0}) 03:34:29 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x6c00000000000000, 0x0, 0x0}) 03:34:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x1f}}, 0x18) ppoll(&(0x7f0000000240)=[{r0, 0x1db07ced1638819b}, {r1, 0x40}, {r0, 0x6}], 0x3, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)={0x7c}, 0x8) r3 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f0000000300)=0x54) 03:34:29 executing program 2: stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r2, r2, 0x0, 0x144) ppoll(&(0x7f0000000040)=[{r1, 0x1}, {r2, 0x1000}, {r2, 0x38}], 0x3, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000000c0)={0x200}, 0x8) 03:34:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000c00000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 545.624109][ T1342] binder: BC_ATTEMPT_ACQUIRE not supported [ 545.630314][ T1347] binder: 1338:1347 ioctl c018620c 200005c0 returned -22 [ 545.646330][ T1342] binder: 1341:1342 ioctl c0306201 200005c0 returned -22 03:34:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x4, 0x12) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x9, &(0x7f0000000080)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) 03:34:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000e00000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) setxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'\x00\f', 0xfffffffffffffff7}, 0x28, 0x3) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x4000) recvfrom$inet6(r2, &(0x7f00000003c0)=""/170, 0xaa, 0x2023, &(0x7f0000000280)={0xa, 0x4e21, 0x1, @rand_addr="6a1994c93aea4470efa209b084b33079"}, 0x1c) timer_create(0x1, &(0x7f0000000340)={0x0, 0x28, 0x4, @thr={&(0x7f0000000480)="cefa8887e60587d9d2593be616c39cb001a813d8ab7ca24ecafa4aaff1cf7fbd489aec179af2e707599d768c4b831304504c4dea42080eccefa4d1934aa05f55dbede4871e88f3008f64f2a276b9f0db74ab1026b7589ace4b825f813735f3c65f343a6b319b1d5ee14c508cad66d3", &(0x7f0000000500)="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"}}, &(0x7f0000001500)=0x0) timer_gettime(r3, &(0x7f0000001540)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x724, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 03:34:29 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4, 0x0}) 03:34:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000240)={0xc6, ""/198}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) 03:34:29 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x7400000000000000, 0x0, 0x0}) [ 545.919845][ T1690] binder: 1664:1690 ioctl c018620c 200005c0 returned -22 03:34:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r3 = socket$isdn(0x22, 0x3, 0x11) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000000c0)=r4) 03:34:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000f00000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 545.991943][ T1732] binder: BC_ATTEMPT_ACQUIRE not supported [ 546.004414][ T1732] binder: 1731:1732 ioctl c0306201 200005c0 returned -22 03:34:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000040)='./cgroup.cpu\x00', 0xffffffffffffffff}, 0x30) sched_setscheduler(r3, 0x6, &(0x7f00000000c0)=0x2) sendfile(r1, r1, 0x0, 0x144) 03:34:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00001000000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:29 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x5, 0x0}) 03:34:29 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x7a00000000000000, 0x0, 0x0}) 03:34:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x220140, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1fc, 0x13, 0x4, 0x10, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x1}, [@generic="caee730c93eb1d16199f205f9653528f39662442bd20adbd0b8f79827d665796aa85e6fdd78a4081356243b6e03584e195fc2d0226e71cc69b79942e338575bd60", @generic="d2117dd54fd84e65f3f74674958e57b44b7b37b3145ba84d50d5ffa0b405614e6651673d2c5ccc8e0785debaa71f5247ce881d5d6e045d6dc059aa27a21262070468861979f7eaa8c6369bdadb5a8d12da82bae1f55bc4b2ec9fd67b8573f4f9e8206b331ad4476b8ded09405006b6e338ff08368c1d9ec0e832e04cfd5a74e6e3df9e34a81dda552d0192dc8be7ec320fe67f9a951d94952d4bc9dd86d1f102326cfd4517bf9f7cdaef425fcb1ab5ffc8cf29338c2b0f4d238bf982bb518c6d18257c56e272012d436b10f470c7c18a7836df415dcc08370f7a509a62fc35c49c6c416b2e1baee8d232e4104de62e8cac3a5cb877", @generic="2df1120601d6017aed70a9e0d0e4da4a9e4a1729de6e63be767ef2d870cdee0ed13d1e052814f0fd6c7eebb32ebcd6ad5ff764c92d5b2f0f5ee9a4ff876154266305df259a77a6a1ace306a4d10d30f66651fe942a64d0c51d75e4a446d158c248e510602f0662a2571d60651403480802f290f405418195e65698e6dbf079459f09577460d1318ff9135f8cc9c467c7c7934242ffa4b2c0e4649524c255662528ea64de2986a42d60234347cea6af"]}, 0x1fc}}, 0x20040000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 546.224980][ T1967] binder: 1944:1967 ioctl c018620c 200005c0 returned -22 03:34:29 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000240)="602390dbabf918be8bf483acf1a710e4895f4fec3e041ca1dde540258a863ba44e8082c10c5844919fa8b8bb9874e5937b37d836ea04dc8fd8f02db855f0ce934c42e3a194a510ad975bc7e18a10fb103ba795b6d59075fa76555fa22ddd4cc96a28894a33bfe430c2006ce32f380452a327303febe4ed7e22223fd64b586dc7e38ead798dc4783fa6a2acbad6f7c59aee873938f39e14a229d1bea2d892f63c480ca9e6a7c92681d238e8fa08ffafac0f5e1fd03c8db81143ff84cf1b80c7e7e40a04120b1a6092e84727879d1060bffd8701eb78938c216f") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r2, r2, 0x0, 0x144) [ 546.284670][ T2004] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00002800000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000080)=0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 546.326204][ T2004] binder: 2000:2004 ioctl c0306201 200005c0 returned -22 [ 546.386572][T23889] libceph: connect [d::]:6789 error -101 [ 546.392396][T23889] libceph: mon0 [d::]:6789 connect error 03:34:30 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6, 0x0}) 03:34:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000180)={@initdev, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @loopback}, &(0x7f0000000280)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @loopback, @dev}, &(0x7f0000000300)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74020000", @ANYRES16=r2, @ANYBLOB="00022abd7000fedbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="5802020038000100240001006e4c746966795f70656572735f696e746572dae06c00000000000000000000000800030003000000080004000104000040000100240001006c425f74785f686173685f746f5f700100000000000000696e67000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="08000700000000003c000100240001006c6200000008000300050000000c000400686173680000000040000100248001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008002a0051030000080006000000000000000000000000000000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7], 0x274}, 0x1, 0x0, 0x0, 0x4}, 0x800) r8 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r8, r8, 0x0, 0x144) 03:34:30 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x2, 0x0}) 03:34:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00004800000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 546.538831][ T2275] binder_ioctl_get_node_info_for_ref: 4 callbacks suppressed [ 546.538845][ T2275] binder: 2273 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 546.538860][ T2275] binder: 2273:2275 ioctl c018620c 200005c0 returned -22 03:34:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x10200) getsockname$unix(r2, &(0x7f0000000080), &(0x7f0000000100)=0x6e) ioctl(r0, 0x1000008914, &(0x7f0000000040)="0adc1f12d97f0f3a3a0000000000000000000000000000") sendfile(r1, r1, 0x0, 0x144) 03:34:30 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x20000) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) [ 546.728287][ T2429] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00004c00000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 546.743877][ T2429] binder: 2345:2429 ioctl c0306201 200005c0 returned -22 03:34:30 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7, 0x0}) 03:34:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x12040) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000080)={0xa, 0x7, 0x1, 0x80000001, 'syz1\x00', 0x8}) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'lo\x00', {0x2, 0x4e20, @broadcast}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r2, r2, 0x0, 0x144) 03:34:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) pselect6(0x40, &(0x7f0000000040)={0x3, 0x101, 0xff, 0x8, 0x7, 0x8, 0x5, 0x8}, &(0x7f0000000080)={0x9, 0x4, 0x8, 0x80, 0x5, 0x2, 0x401, 0x3}, &(0x7f00000000c0)={0x81, 0x7, 0x5, 0x7, 0x7fff, 0x7, 0x7ff, 0x3ff}, &(0x7f0000000100), &(0x7f00000001c0)={&(0x7f0000000180)={0x3f67}, 0x8}) 03:34:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./\xda=roup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xe508, 0x50001) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000180)=0x2) sendfile(r1, r1, 0x0, 0x144) 03:34:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00006000000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 546.984842][ T2532] binder: 2527 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 546.984865][ T2532] binder: 2527:2532 ioctl c018620c 200005c0 returned -22 03:34:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x80000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth1\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x4, 0x40, 0xffffffff, 0x9, 0x57e, 0x1000, 0x7fffffff, 0x87fb, 0x3, 0x8, 0x9, 0x1, 0x5, 0x9, 0x20, 0x1000, 0x8f6, 0x100, 0x8, 0x5, 0x2, 0x8}}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) timerfd_settime(r2, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) 03:34:30 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x3, 0x0}) 03:34:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0xc) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f00000000c0)={0x8, "b51297d10b24437929efb3eb1cadc7a915b1ae34a06e11c88e402ccfce851663", 0x2}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x379, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000580)}}, 0x2) 03:34:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00006800000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000180)=""/128) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0ab070") sendfile(r1, r1, 0x0, 0x144) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000080)={0x8, 0x7}) 03:34:30 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x48, 0x0}) 03:34:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00006c00000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) close(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x0, 0x0, @in6={0xa, 0x4e21, 0x101, @local, 0x6}}}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0xfffffffffffffff9) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xffffffff, 0xe0040) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x80000012}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 547.332036][ T2888] binder: 2882 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 547.332049][ T2888] binder: 2882:2888 ioctl c018620c 200005c0 returned -22 [ 547.353496][ T2892] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000080)=@in={0x2, 0x4e21, @rand_addr=0x88a}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)="77be2a30a7680ab909258b134a05b27bace15d7beecd49057b3ba06d2c8ba77a4ad9821ac1be3d205504625739493fe4d05cbd1aa073e27b562a81cdcffcf85ee58e33a339e117fd4fc23a459fa8b0ec3f5d05fb0aeeabed32b7e9a3f1daa1941cfa72e7bf782abc013641b35b26cb06bb7037d58484a43bd492c40bd9233930b2253371d77933b24abc2dd519b3d885d1ca09eef47e481a8f6d24d004f2017ce76284a0bcd088ede6e7831a6a7934b9a1748d28596ff044e22429d4634c3d11e1829a02b6e3643836", 0xc9}], 0x1, &(0x7f0000000100)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x13}}], 0x20, 0x8000}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) [ 547.381345][ T2892] binder: 2890:2892 ioctl c0306201 200005c0 returned -22 [ 547.426514][ T7891] libceph: connect [d::]:6789 error -101 [ 547.432463][ T7891] libceph: mon0 [d::]:6789 connect error 03:34:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x4ec94e995834b934, 0xfa00, {0x0, r1, r0}}, 0x1ef) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r3 = socket(0x1d, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) 03:34:31 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$unix(0x1, 0x7, 0x0) sendfile(r1, r1, 0x0, 0x144) 03:34:31 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4c, 0x0}) 03:34:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00007400000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:31 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4, 0x0}) 03:34:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) [ 547.652708][ T3274] binder: 3268 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 547.652723][ T3274] binder: 3268:3274 ioctl c018620c 200005c0 returned -22 [ 547.684374][ T3282] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:31 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x144) [ 547.716715][ T3282] binder: 3281:3282 ioctl c0306201 200005c0 returned -22 03:34:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00007a00000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x3) 03:34:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x8000, 0x0) sendto$rxrpc(r1, &(0x7f0000000340)="6d1fc424f007dd8f8c479774fd7408e51e1fb96083f3c1d9a817269874887f07b8a4c7ff6478428d5917c028d56b13137a0148767e6c8541d68b84795d21963d7b416d4e40a9f28d28fe3ea85cc025d7fd70da57e1de7217e1ad36675bcbf566352e2e201caff87a9bf6af18de5990c5cc3979fe074910c069cdc63cbeb77a014b5a135b0d3af98d4f00b6a0fc5511f3435d692ec8a5ecde5c8f21330e431a05b808f607007feae7c657849e5703f1c1ff484ad9f6cbc93957555c78", 0xbc, 0x8000, &(0x7f00000001c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x2055, @mcast2, 0x401}}, 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) splice(r2, &(0x7f0000000040), r2, &(0x7f0000000080), 0x11, 0x1) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:31 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x60, 0x0}) 03:34:31 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x5, 0x0}) 03:34:31 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x2, 0x2) getdents(r1, &(0x7f0000000180)=""/124, 0x7c) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_dccp_buf(r1, 0x21, 0xcf, &(0x7f00000000c0)="5f3dfec04e5cbcccdd7176690f7f3a6406c68ca2bf3306c988a1847b84f8407294a651e4d0a9a599e4e5cd65b163da2c8a4fe80e6fbe", 0x36) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40000, 0x50) accept$inet6(r4, 0x0, &(0x7f0000000080)) ioctl(r3, 0x0, &(0x7f0000000100)="0adc1f123c123f3188b070") sendfile(r2, r2, 0x0, 0x144) 03:34:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000f000000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 548.003921][ T3662] binder: 3636 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 548.003934][ T3662] binder: 3636:3662 ioctl c018620c 200005c0 returned -22 [ 548.076359][ T3675] binder: BC_ATTEMPT_ACQUIRE not supported [ 548.110728][ T3675] binder: 3673:3675 ioctl c0306201 200005c0 returned -22 03:34:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4e, 0x840) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 548.129584][ T3771] __nla_parse: 14 callbacks suppressed [ 548.129595][ T3771] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:31 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4000, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x1}, 0x8) sendfile(r1, r1, 0x0, 0x144) 03:34:31 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x68, 0x0}) [ 548.257081][ T3771] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:31 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6, 0x0}) 03:34:31 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) 03:34:31 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000580)={{0x0, 0x4}, 'port1\x00', 0x22, 0x30, 0x5, 0x1, 0x40d, 0xb38, 0x0, 0x0, 0x1, 0x5}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0xffffffffffffff1f, 0xfa00, {0x0, r2, r3}}, 0x125) msgget(0x1, 0x400) chmod(&(0x7f00000000c0)='./file0\x00', 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000fb00000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 548.395726][ T4079] binder: 4048 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 548.395739][ T4079] binder: 4048:4079 ioctl c018620c 200005c0 returned -22 03:34:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x7) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x115000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000100)={0x2, 0x8, 0x3f, 0x800, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)={r2, 0x0, 0x5f, "3e0ae94d83199db4a04595b1ed9ad8a79e0304878a6fe10a16176b597c7774088bf817ebc0ccb0b409fa228d276e2815a9f34bdd416ecdc1bb352c43d555529107bbfcd32023f609164bc2903e9c07f3f9b2c99df713c92fd88f8babd8b787"}, 0x67) write$P9_RRENAME(r1, &(0x7f00000001c0)={0x7, 0x15, 0x2}, 0x7) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x8) [ 548.438019][ T4084] binder: BC_ATTEMPT_ACQUIRE not supported [ 548.490054][ T4084] binder: 4083:4084 ioctl c0306201 200005c0 returned -22 [ 548.518569][ T4092] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x4000)=nil) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:32 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:34:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000003000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:32 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6c, 0x0}) 03:34:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x118, r4, 0x402, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x445}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffecd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2d37}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc668}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x24040001}, 0x20000000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x311400, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f00000000c0)={0x0, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000500)={@loopback, @loopback}, 0x8) 03:34:32 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7, 0x0}) 03:34:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x600, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 548.801022][ T4425] binder: 4424 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 548.801036][ T4425] binder: 4424:4425 ioctl c018620c 200005c0 returned -22 [ 548.822372][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:32 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x867d, 0x40) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000080)) 03:34:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000005000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 548.939601][ T4535] binder: BC_ATTEMPT_ACQUIRE not supported [ 548.986430][ T4535] binder: 4481:4535 ioctl c0306201 200005c0 returned -22 03:34:32 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x74, 0x0}) 03:34:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000580)={0x0, 0xcf, "a9e8886bce06a11ab1dcb92f8b20e4df42c47edc018733c7de70580cc803da3a143121b1a29f631d9172c42159db56a06fd4e570c26d923b19fba966cbbaeb752fef1a1c4c690f40c551d167f3a7fd6ed8cfcc5f99dfb0c8f8440b43a000946f1659aa67e74cda2059f1d2f8653ba49d116e125bcd579c4a21e6d2fda51b44453ae9b622042e836ecffa7395b57f469e095c284581c74ebdbdfd2e836ab8336fc36eda0e5ddfef59826d39ce2a784eac287f13975fc2438d9116db3d6221e7fd3be5297016b0b1e6eee01c5d8a0624"}, &(0x7f0000000100)=0xd7) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)={r4, 0xffffffffffffffc0, 0x3, [0x7fff, 0x5, 0xfffffffffffffffc]}, 0xe) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r5 = dup(r0) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000080)=0x100) 03:34:32 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000080)=""/131, 0x20000, 0x1000, 0xfffffffffffffffa}, 0x18) 03:34:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000001c0)={0xffffffffffffff9c}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x3) [ 549.076617][ T4652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:32 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x48, 0x0}) [ 549.196173][ T4754] binder: 4693 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 549.196189][ T4754] binder: 4693:4754 ioctl c018620c 200005c0 returned -22 03:34:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000006000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:32 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x20080) ioctl$TIOCCONS(r3, 0x541d) sendfile(r1, r1, 0x0, 0x144) [ 549.301108][ T4802] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = getpid() tkill(r2, 0x14) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000580)={"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"}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x101000) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) [ 549.352622][ T4802] binder: 4798:4802 ioctl c0306201 200005c0 returned -22 [ 549.373389][ T4937] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:32 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7a, 0x0}) 03:34:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x8082, 0x0) getdents64(r2, &(0x7f00000000c0)=""/100, 0x64) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x78) [ 549.427951][T30288] libceph: mon1 [::b]:6789 socket error on read 03:34:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000007000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:33 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x144) 03:34:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000a000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:33 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4c, 0x0}) [ 549.575218][ T5103] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 549.576295][ T5099] binder: 5071 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 549.576308][ T5099] binder: 5071:5099 ioctl c018620c 200005c0 returned -22 03:34:33 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cp\x95seH\xf8\x1b\x9fm\x9b\xfd<\xf2ar\x80\t\xfb\x7f\x13_herdwall\x00\xd0\xa21\xb7j6y\xfe\x0f\x80\x176\x97X\x9e@\xed\xe2JT|E:5\xf8\f#\x9c\x1b\xd0\x82\xc1\xd6\x80,IpL,CS\'L\xa1\xd3\x8f\x7fJEc\xa6\xbd~\xf9\xa5\x17pd]\xe4\xa3LT\xb5\x01\xb6\xaaD\xd9\xa9\x00t\x8b\x9b\x04\x15\x14\xac\xe1b\xca=\xd4\v\xbcO\xb0\xab\xe4Y\xb5T\xf6\x8a*\xe6\x00\xbc\xd0\xea\xed\x12\x80\x00\"u\x12<\x06\xdf\x1c!!\xec\x1c_L\".\xab\xc8\xcf\xd1\x1a\x1f>\xa0\xcd\x1c\x95G\xd0\x1d\xbb\x05E\xff{?\xb5\xa4\xc2\xc2Nu\xc29\xb4\xcd\xc2k\x9b\x9f\xc5\xeb4x(\t\xa5\xe4n\x0f`\xccVa3\x88\xbe)\x88u\xf8\xc1c\xce\xaeAN~\x9f\xb7\xd8p\xcdfZ\xf4\xc6c\xef)\x92-PR\xa1\x8f\x126\t\x89z\xd4z\x03:I1\xb0\xdc\x13\xd4/\x03\xf5tv', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00000000c0)={0x3080000000000000, 0x1000, 0x9, 0x8, 0x2}) sendfile(r1, r1, 0x0, 0x144) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @local}, 0x40, {0x2, 0x4e20, @multicast1}, 'team_slave_1\x00'}) [ 549.687611][ T5167] binder: BC_ATTEMPT_ACQUIRE not supported [ 549.714668][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000c000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 549.758210][ T5167] binder: 5138:5167 ioctl c0306201 200005c0 returned -22 03:34:33 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x404200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r2, r1}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:33 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x300, 0x0}) 03:34:33 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x501000, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000080)={0x21, 0x7, 0x2, {{0x14, 'cpuset.mem_hardwall\x00'}, 0x6}}, 0x21) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) [ 549.879429][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 549.935474][ T5422] binder: 5364 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 549.935487][ T5422] binder: 5364:5422 ioctl c018620c 200005c0 returned -22 [ 551.426769][T30288] libceph: mon1 [::b]:6789 socket closed (con state CONNECTING) [ 551.434864][T30288] libceph: connect [d::]:6789 error -101 [ 551.440734][T30288] libceph: mon0 [d::]:6789 connect error [ 552.386373][T30288] libceph: connect [d::]:6789 error -101 [ 552.392250][T30288] libceph: mon0 [d::]:6789 connect error 03:34:36 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x4}}, 0xffffffce) readahead(r0, 0x500000000000000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = socket(0xb, 0x800, 0x200) accept$nfc_llcp(r2, &(0x7f0000000080), &(0x7f0000000100)=0x60) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:36 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x60, 0x0}) 03:34:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000e000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:36 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x3ff, 0x2, 0x5, 0x4, 0x1a, 0x4, 0x0, 0x0, 0x4, 0xb8, 0x8001, 0x8000}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r2, r2, 0x0, 0x144) 03:34:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000580)={0x0, 0xfb, 0x82, 0x4, 0xffffffffffff0000, "b336f9a7247b35fe6202271b17acd6ca", "87b4bf376907449376f1f1190417ff8909cecc1c6970c075b263083b612bebc3e43196ead23597b37f148c4f0c72fdf72384ce0b9ac4ae82f8334d8cb06d89b5dbe26de442bf73ed09b39bdb7d0eb77c623e54170defd6a9653cfeb6443434f304c41bfb79d70e1ea27d3d5441"}, 0x82, 0x3) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:36 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x500, 0x0}) [ 552.547586][ T5653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 552.559172][ T5657] binder: BC_ATTEMPT_ACQUIRE not supported [ 552.560877][ T5663] binder: 5650 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 552.560890][ T5663] binder: 5650:5663 ioctl c018620c 200005c0 returned -22 [ 552.582958][ T5657] binder: 5656:5657 ioctl c0306201 200005c0 returned -22 03:34:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000c00e000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x440040) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000080)=0x4) sendfile(r0, r1, 0x0, 0x49dd) 03:34:36 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x40000) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x6, 0x3ff, 0x1}}) 03:34:36 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x600, 0x0}) 03:34:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f00000000c0)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:36 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x68, 0x0}) 03:34:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000f000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x108000000002) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5) ioctl$FIONREAD(r0, 0x5437, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x40, 0x2) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000180)) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x240c0) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000080)={0x5c, "6c0a6dd76e02cc0baa3a82bcf8d20687630d66b7b160cfd82a40d7556968bbc5", 0x3, 0x2, 0x4, 0x0, 0x0, 0x2, 0x4, 0x10001}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 552.903751][ T5996] binder: 5990 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 552.903765][ T5996] binder: 5990:5996 ioctl c018620c 200005c0 returned -22 [ 552.962672][ T6005] binder: BC_ATTEMPT_ACQUIRE not supported [ 552.997377][ T6005] binder: 6002:6005 ioctl c0306201 200005c0 returned -22 03:34:36 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x13f, 0x9e1f44252efb14d6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x595) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0xa}}, 0x20) [ 553.051473][ T6007] mkiss: ax0: crc mode is auto. 03:34:36 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x700, 0x0}) 03:34:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000020000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x101080, 0x0) recvfrom$unix(r3, &(0x7f0000000580)=""/239, 0xef, 0x100, &(0x7f0000000680)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) rt_tgsigqueueinfo(r4, r5, 0x33, &(0x7f0000000180)={0x22, 0x9, 0x3}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000000100)={0x0, @broadcast, 0x4e24, 0x3, 'ovf\x00', 0x4, 0x1200000000000, 0x54}, 0x2c) 03:34:36 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6c, 0x0}) [ 553.267958][ T6053] mkiss: ax0: crc mode is auto. [ 553.269623][ T6342] binder: 6335 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 553.269635][ T6342] binder: 6335:6342 ioctl c018620c 200005c0 returned -22 03:34:36 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) flock(r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 553.308087][ T6344] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 553.349836][ T6354] __nla_parse: 3 callbacks suppressed [ 553.349851][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 553.411159][ T6362] binder: BC_ATTEMPT_ACQUIRE not supported [ 553.426760][T30288] libceph: connect [d::]:6789 error -101 [ 553.435826][T30288] libceph: mon0 [d::]:6789 connect error [ 553.480359][ T6362] binder: 6352:6362 ioctl c0306201 200005c0 returned -22 03:34:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7f, 0x80000) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000080)) 03:34:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000028000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x28000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0xfffffffffffffffa, @mcast1, 0x4}}, 0x2, 0x2}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x1ff}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x10201, 0x2, 0x3000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 03:34:37 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x2000, 0x0}) 03:34:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 553.737893][ T6630] binder: 6614 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 553.737907][ T6630] binder: 6614:6630 ioctl c018620c 200005c0 returned -22 [ 553.761584][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0xa) r4 = getpid() ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{0x6, 0x7, 0x1ff, 0x83, 'syz1\x00', 0x2}, 0x0, 0x1, 0x25ec7d6a, r4, 0x6, 0x7, 'syz0\x00', &(0x7f0000000180)=['cpuset.mem_hardwall\x00', '\x00', './cgroup.cpu\x00', '\'mime_typevmnet1\xb3%cpuset\x00', 'keyringcgroup,securityuser#\x00', 'eth0\x00'], 0x5c, [], [0x4, 0x7, 0x8, 0x4]}) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000080)={0x400, 0x8, 0x5, 0xffffffffffffff81}) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f00000000c0)={0x6, 0xac, 0xef, 0x0, 0x14}) sendfile(r1, r1, 0x0, 0x144) 03:34:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="2400000020002502075f0b65ff61fc2280000000001000220ee1000c08000d00feff1700", 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:37 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x74, 0x0}) 03:34:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000003f000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:37 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x3f00, 0x0}) 03:34:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) [ 554.138227][ T6880] binder: BC_ATTEMPT_ACQUIRE not supported [ 554.160355][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 554.168826][ T6880] binder: 6844:6880 ioctl c0306201 200005c0 returned -22 [ 554.178255][ T6915] binder: 6885 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 554.178269][ T6915] binder: 6885:6915 ioctl c018620c 200005c0 returned -22 03:34:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0xfc, 0xfa00, {0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x8801) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x84d, 0x5a9000) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x6, 0x400041) linkat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x1000) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000048000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:38 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7a, 0x0}) 03:34:38 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4800, 0x0}) 03:34:38 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r0, r1, 0x0, 0x144) [ 554.500866][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x5, 0x80000000, 0x6, 0x7, 0x2, [{0xffff, 0x6, 0xff, 0x0, 0x0, 0x200}, {0x7, 0x7, 0x0, 0x0, 0x0, 0xa00}]}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 554.637707][ T7237] binder: BC_ATTEMPT_ACQUIRE not supported [ 554.659537][ T7244] binder: 7233 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 554.659550][ T7244] binder: 7233:7244 ioctl c018620c 200005c0 returned -22 [ 554.683544][ T7237] binder: 7231:7237 ioctl c0306201 200005c0 returned -22 03:34:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = dup2(r0, r0) connect$nfc_llcp(r2, &(0x7f00000002c0)={0x27, 0x1, 0x2, 0x7, 0x5, 0x3f, "ab32cba06cd77bbd7562ee3bf8b54149c889f7f2908bf037d42d134e42ab60a604a66bca6ea916efeaebca8a4f740bf8ed48f85c907b6afec15fca06ae4b51", 0xa}, 0x60) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xb3b, 0x10000) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000011c0)={'team0\x00', 0x0}) recvfrom$packet(r2, &(0x7f0000000500)=""/14, 0xe, 0x100, &(0x7f0000001200)={0x11, 0x1b, r5, 0x1, 0x572b8d32, 0x6, @dev={[], 0x24}}, 0x14) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r1, 0x13}}, 0x10) r6 = accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001240)=""/4096, &(0x7f0000002240)=0x1000) write$binfmt_elf32(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xb6f) sendto$packet(r4, &(0x7f0000000580)="bb80449d54cf997b78ec0867b57535fde860c1958280a09efa090f9271973602c165234c9df58e8188d9edf914302f282faf97b9e40764f2387423bcda1f6d598959b4d4f2bbbd4a531f2d8375d95d0a483b09f29c1b6486e6cc90dbc5e5f2bce45a050a3f4bd357602a989a2422716347bc5e47105d0b81402681fe5194947ef508938736c841b5aba41f8791dcac19371b6c4d4a8ca9f373688c9d5baa41da7cec6b18664d4e", 0xa7, 0x20000841, &(0x7f0000000180)={0x11, 0x17, r7, 0x1, 0xa3f, 0x6, @random="c1afc5f2a566"}, 0x14) 03:34:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xc, 0x4200) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x210000, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000080)=0x9) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000040)) 03:34:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000004c000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:38 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4c00, 0x0}) 03:34:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0xfef2, 0xfa00, {0x0, r1, r0}}, 0x26c) [ 554.999094][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:38 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x300, 0x0}) 03:34:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) [ 555.119008][ T7597] binder: 7552 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 555.119022][ T7597] binder: 7552:7597 ioctl c018620c 200005c0 returned -22 03:34:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x88000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000580)=""/221) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00006558000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 555.212536][ T7612] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0xfffffffffffffd59) [ 555.295070][ T7612] binder: 7608:7612 ioctl c0306201 200005c0 returned -22 03:34:38 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6000, 0x0}) [ 555.358126][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 555.426971][T30288] libceph: mon1 [::b]:6789 socket error on write 03:34:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000060000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) fcntl$setpipe(r1, 0x407, 0x7) [ 555.527149][ T7970] binder: 7914 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 555.527163][ T7970] binder: 7914:7970 ioctl c018620c 200005c0 returned -22 03:34:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_team\x00', r4}) 03:34:39 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x500, 0x0}) 03:34:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x1) write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x507) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), r1, 0x1}}, 0x18) [ 555.621123][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:39 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6800, 0x0}) [ 555.718000][ T8082] binder: BC_ATTEMPT_ACQUIRE not supported [ 555.731969][ T8082] binder: 8035:8082 ioctl c0306201 200005c0 returned -22 03:34:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00005865000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6f, 0x100) setsockopt$packet_buf(r2, 0x107, 0x0, &(0x7f0000000240)="fe353deb1bbdc39dffb25028cbe959ee58d4371b3504bb94b7acede5b627c2bd70675ba80f2b64f6b69c274651b33c39a454a78b335894b91710995fd411a18df857f923167dbcb6a2e5e0af16f673404d69a922b5ffa8b379d0850848de3c4eb30dfde645b628e7a660d349fe0b9fef49169f1ae04e4addd29d350761058e6c9e86251c5b6c783f5c198423ae025756707d2247c5ecbcbe244e046836f79930dbc3d281a206224fb6ad9784922feaf3c530930469849879258e1f1f5d958162a8a7290d45e44aee9b9b6eb3ac175a81ec2631854a82846cb63bcd4b88b6717a5eb6bd0e82", 0xe5) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) 03:34:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x8400) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 555.884414][ T8282] binder: 8202 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 555.884454][ T8282] binder: 8202:8282 ioctl c018620c 200005c0 returned -22 [ 555.888697][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:39 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x600, 0x0}) 03:34:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = msgget(0x3, 0x1) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000080)=""/27) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 555.957473][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./c\t\x00\x00\x00\x00\x00\x00\x00u\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) 03:34:39 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6c00, 0x0}) 03:34:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000068000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 556.093938][ T8466] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 556.147764][ T8466] binder: 8444:8466 ioctl c0306201 200005c0 returned -22 [ 556.171659][ T8493] binder: 8480 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 556.171671][ T8493] binder: 8480:8493 ioctl c018620c 200005c0 returned -22 [ 556.187594][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xff, 0x30}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000001c0)={r4, 0xb0, 0x6, 0x5}, &(0x7f0000000240)=0x10) r5 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xffff, 0x10000) ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000080)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) 03:34:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x4000, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000180)=0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000000c0)={0xc, 0xfffffffffffffddd, 0xfa00, {&(0x7f0000000340)}}, 0x7) 03:34:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000006c000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:39 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7400, 0x0}) 03:34:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='mYmI\xa7\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) 03:34:39 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x700, 0x0}) 03:34:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x10000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000240)="0ea4369b6ba819674a6ad1f75e4dc79cfac549c49ea19e37bdb5f512d2041592b1f20b6b409ff164eef272ccdd4262f506932fcb3843d6e7fd899f095214d093e38c5eaf5362d6425803f97af764b6c00c2dcae34d3e4f856c", &(0x7f0000000580)=""/4096}, 0x18) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @local}}, 0x9, 0x80, 0x1, 0xfffffffffffffffc, 0x800}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000180)={r3, 0x400}, 0x8) [ 556.413641][T30288] libceph: mon1 [::b]:6789 socket closed (con state CONNECTING) [ 556.445202][ T8830] binder: 8826:8830 ioctl c018620c 200005c0 returned -22 03:34:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000074000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:40 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) [ 556.558536][ T8954] binder: BC_ATTEMPT_ACQUIRE not supported [ 556.581160][ T8954] binder: 8921:8954 ioctl c0306201 200005c0 returned -22 03:34:40 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7a00, 0x0}) 03:34:40 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw\x00') ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) fchmod(r0, 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0), 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'team0\x00', &(0x7f00000003c0)=@ethtool_link_settings={0x4d, 0x1000, 0x5, 0x3ff, 0x0, 0x1, 0x80, 0x8, 0xc2c, 0x1f, [0xfaf, 0x3, 0x1, 0x0, 0x100, 0x80, 0x10000], [0x8, 0x7fff, 0xfffffffffffff801]}}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x1ef, 0xfa00, {0x0, r3, r0}}, 0xffffffffffffff8e) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) 03:34:40 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80114008}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="50010000", @ANYRES16=r3, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) 03:34:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000007a000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 556.762185][ T9133] binder: 9096:9133 ioctl c018620c 200005c0 returned -22 03:34:40 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x2000, 0x0}) 03:34:40 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8000, 0x8000) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000180)={r2, &(0x7f0000000100)=""/25}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000081000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 556.899126][ T9249] binder: BC_ATTEMPT_ACQUIRE not supported [ 556.926655][ T9249] binder: 9248:9249 ioctl c0306201 200005c0 returned -22 03:34:40 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x1000000, 0x0}) 03:34:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x800, 0x400, 0x8, 0x4}}) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_int(r1, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x0) 03:34:40 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x3f00, 0x0}) [ 557.111175][ T9420] binder: 9417:9420 ioctl c018620c 200005c0 returned -22 [ 557.171908][ T9435] binder: BC_ATTEMPT_ACQUIRE not supported [ 557.186675][ T9435] binder: 9429:9435 ioctl c0306201 200005c0 returned -22 [ 557.427545][ T17] libceph: connect [d::]:6789 error -101 [ 557.433265][ T17] libceph: mon0 [d::]:6789 connect error 03:34:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0xffffffffffffffff}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x8, 0x40000) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000100)) 03:34:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000ec0000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20200, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000340)) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4efc129a243fa000013", @ANYRES16=r3, @ANYBLOB="00012bbd7000fddbdf250f00000008000600000000001c000200080004001f00000008000500ff0f00000800040001000000380001000800010002000000080005000200000014000300e00000020000000000000000000000000800060064680000080001000a000000100001000c000700020000000200000008000600090000002c000200080002004e2100000800040001800000080005000100000008000300030000000800050001000000080006000900000008000600ffffffff"], 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) accept4$alg(r2, 0x0, 0x0, 0x80800) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x8) 03:34:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0xfffffe0d, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 03:34:41 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x2000000, 0x0}) 03:34:41 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4800, 0x0}) 03:34:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000f0000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 557.551217][ T9776] binder: 9771:9776 ioctl c018620c 200005c0 returned -22 [ 557.561537][ T9777] binder: BC_ATTEMPT_ACQUIRE not supported [ 557.573969][ T9777] binder: 9775:9777 ioctl c0306201 200005c0 returned -22 03:34:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1f, 0x8000) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000180)=""/130) sendfile(r1, r1, 0x0, 0x144) 03:34:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0x19, "c608b9afeba9126e764137af0276d5737507a70a306c51b2e1"}, &(0x7f0000000580)=0x21) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x800, 0x0) openat$cgroup_ro(r4, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000300)={r2, 0x5, 0x8, 0x4107, 0x76, 0x9, 0x1000, 0x101, {r3, @in={{0x2, 0x4e21, @loopback}}, 0x2, 0x0, 0x5, 0x3, 0x2}}, &(0x7f00000003c0)=0xb0) dup3(r0, r0, 0x80000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, [], [{0x9b7, 0x2f0, 0x708, 0x0, 0x6, 0x400}, {0x8, 0x44a9, 0x0, 0x1, 0x9, 0x10001}], [[]]}) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000000)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:41 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x3000000, 0x0}) 03:34:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000fb000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x7) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f00000000c0)={0xfffffffffffffffb, 0x4, 0x80000000, 0x1000, &(0x7f0000000580)=""/4096, 0xf0, &(0x7f0000001580)=""/240, 0xe2, &(0x7f0000001680)=""/226}) 03:34:41 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4c00, 0x0}) [ 557.844270][T10121] binder_ioctl_get_node_info_for_ref: 4 callbacks suppressed [ 557.844278][T10121] binder: 10118 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 557.844295][T10121] binder: 10118:10121 ioctl c018620c 200005c0 returned -22 03:34:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) fadvise64(r0, 0x0, 0x1, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:41 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x978, 0x2) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000480)=0x4ba, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r4 = msgget(0x1, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000040)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) r7 = geteuid() getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000340)=0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) msgctl$IPC_SET(r4, 0x1, &(0x7f00000003c0)={{0x5, r5, r6, r7, r8, 0x20, 0x7}, 0x1000, 0x1, 0x2, 0x3, 0x229, 0xefb, r9, r10}) sendfile(r2, r2, 0x0, 0x144) [ 557.940290][T10134] binder: BC_ATTEMPT_ACQUIRE not supported [ 557.980097][T10134] binder: 10132:10134 ioctl c0306201 200005c0 returned -22 03:34:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000040030000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'vboxnet1nodevWuser+['}, {}, {0x20, 'keyring^procvboxnet1'}, {0x20, '/dev/infiniband/rdma_cm\x00'}, {0x20, '/dev/infiniband/rdma_cm\x00'}], 0xa, "48ab95a2b32f822f70d1c41fa38c56e0f43699ed8473f3e78395151222bdd1256ccdc29574b8f6cca24e97af6e86c7bb4f183bb04faf8e1735ffcbec4292263ae5c6c42650122409479844ec705a6781f192c1df4a7ba91534f40d0b73452be99cb16f6cc9dbd6a5f2c8e7905b7664c284216fab1c306864afa1c792d7c3f05c6bf602225cf2cf85402961b2f8f298b301d267a780f51c8707e1d7f4f1bc8eecfb0646a1e475c227adc8e8380e8b10a0d51b602fb94e42b58098dc84f01df7bb134908e931dd60c50cbece15b2939582c4ca330bddf3202757fa6bf8d2bb7ac2bfe7269db07f6875b46400f4ee10695bed848300e822bbfd92"}, 0x161) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:41 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4000000, 0x0}) 03:34:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f00000000c0)='@]nodev)^\x00', 0xa, 0x3) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:41 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0xa000, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000080)=""/3, &(0x7f0000000100)=0x23d) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r2, r2, 0x0, 0x144) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000180)={0x1, "54c9ec7fbd69c2c17e0a419b7bebb7f364d7413594e5178880f81be79bbff723", 0x3, 0x880, 0x80, 0x9, 0xa, 0x0, 0x7, 0xa3}) 03:34:41 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6000, 0x0}) 03:34:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000003400000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x1}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 558.284111][T10523] binder: BC_ATTEMPT_ACQUIRE not supported [ 558.334742][T10523] binder: 10474:10523 ioctl c0306201 200005c0 returned -22 [ 558.372413][T10617] __nla_parse: 11 callbacks suppressed 03:34:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) socket$inet_udplite(0x2, 0x2, 0x88) 03:34:41 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x5000000, 0x0}) [ 558.372422][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 558.387870][ T22] libceph: connect [d::]:6789 error -101 [ 558.393759][ T22] libceph: mon0 [d::]:6789 connect error 03:34:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0xc0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000500)={0x0, 0x0, 0x2080}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x8001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f00000001c0), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r0, r0, 0x0, 0x144) splice(r2, &(0x7f0000000040), r0, &(0x7f0000000080), 0x2, 0x2) [ 558.477736][T10753] binder: 10660 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 558.477749][T10753] binder: 10660:10753 ioctl c018620c 200005c0 returned -22 03:34:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000a000800000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:42 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3ff, @empty, 0x7}, {0xa, 0x4e21, 0x4, @loopback, 0x21a5}, r1, 0xe7}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:42 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6800, 0x0}) 03:34:42 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6000000, 0x0}) [ 558.669138][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 558.692968][T10962] binder: BC_ATTEMPT_ACQUIRE not supported [ 558.719265][T10962] binder: 10954:10962 ioctl c0306201 200005c0 returned -22 03:34:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0xffffff7c, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0xf7ffffffffffffff}}, 0xb) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffffffff80000000, 0x800) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000100)={0x9, 0x80000000, 0x8001}) 03:34:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x800) r4 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82000400) inotify_rm_watch(r3, r4) sendfile(r1, r1, 0x0, 0x144) 03:34:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000fffff00000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 558.761493][T11044] binder: 11016 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 558.761506][T11044] binder: 11016:11044 ioctl c018620c 200005c0 returned -22 03:34:42 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20020020) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:42 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7000000, 0x0}) 03:34:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) flistxattr(r1, &(0x7f0000000040)=""/213, 0xd5) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = fcntl$getown(r1, 0x9) r4 = perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xe1, 0x3, 0xfff, 0xfffffffffffffff8, 0x0, 0x9, 0x8, 0x5, 0x9, 0x9, 0x7f, 0x7fff, 0x0, 0x900, 0x2, 0x80, 0x3, 0x2, 0x1, 0x101, 0x101, 0x5f, 0x8, 0x7, 0x6, 0x4, 0x7, 0x2, 0x4a, 0x800, 0x9, 0x9, 0x703, 0x6b9ccd00, 0x1, 0xe6, 0x0, 0x892, 0x5, @perf_bp={&(0x7f0000000180), 0x1}, 0x20, 0x2, 0x400, 0x54da86120ee7278a, 0x80000001, 0x4, 0x10000}, r3, 0xb, 0xffffffffffffffff, 0x2) sendfile(r4, r1, 0x0, 0x144) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r5, 0x80045643, 0x3) [ 558.958970][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:42 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6c00, 0x0}) 03:34:42 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x4}, 0xb) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xfffffffffffffff8, 0x200) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c085}, 0x20000000) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000400)=0x1f, 0x4) socket$pppoe(0x18, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="03afa5a47cd7be0f806d928b95e9a26ed6da0825468445f1657653f9970e8b6c31d52e22d2f1c3a8aae7e3a1705c30639af24c93202580c2649ad79c0ed50711b87c393bd8d441e50246ecb0dd4470cf75e3283fbbb63089aa07790be890693ca37a9cc5966212a0842c2da34503eb5ad8293172bd6b81f3e59d198e687987ff82c22915baf9c00d1deef9dc234a9da975e81ec2fd96507038", @ANYRES16=r4, @ANYBLOB="000627bd7000fddbdf25030000000c000300ff0700000000000008000100000000000800010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20000800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000240)={0x7, 0x1f, 0x8, 'queue0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0x2, 0x141080) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) connect$llc(r1, &(0x7f0000000440)={0x1a, 0x301, 0xe4, 0x1, 0x0, 0x0, @random="899dea694002"}, 0x10) [ 559.055096][T11319] binder: 11274 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 559.055109][T11319] binder: 11274:11319 ioctl c018620c 200005c0 returned -22 03:34:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = fcntl$getown(r0, 0x9) timer_create(0x7, &(0x7f0000000080)={0x0, 0x3, 0x2, @tid=r2}, &(0x7f00000000c0)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) [ 559.120085][T11393] binder: BC_ATTEMPT_ACQUIRE not supported [ 559.134204][T11393] binder: 11371:11393 ioctl c0306201 200005c0 returned -22 03:34:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000100421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000040)=""/170, 0xaa}, {&(0x7f0000000100)=""/9, 0x9}], 0x2, 0x0) 03:34:42 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x20000000, 0x0}) [ 559.254056][T11512] QAT: Invalid ioctl 03:34:42 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7400, 0x0}) [ 559.291976][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 559.313149][T11676] QAT: Invalid ioctl [ 559.349658][T11706] binder: 11694 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 559.349671][T11706] binder: 11694:11706 ioctl c018620c 200005c0 returned -22 03:34:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='cpuacct\b\x00\x00\x00ge\x00|\x98\x99G%u\xaa\x8b\x1a\x96;\x16\x1c\x91\xeb\xc4\x06\xc0\xa8\xde\xc7\xbdc\x04,\xe9\x8c\x90_\x0f@\xb6\xe7\x8dt\x15\xcb\xb6\xca\xa3\x1d\xe3\xc03\xd8\xca\"\xa8\xd0\xff\x82V\t\xa8=\xbf\x01\xe6/\xdb\x80\xc8dA Qm\xd8q\x8f\xaf\x19\xc8+ntd\xa6zo\x95,\xaeeoh\x94\xeeu}\x97\xcaI\x16\xc9\xf6\xd4\xbcHZ\xf8\xcf/8\x13j\x83\xf3I\xa8\xca1)i\x06e\xfb\x97\x9e~\x83%\xc7$_}L=\xd5n\x01Dr\x85\xd0\x1c\xca\xe2i\x87\x1a\x96j\n\xb5\x86\x19(\v\xc1\x05\xc5\xf1\xf1i1.\x98\x148\xc1u\x03\x9a\x14\xa0hq\xe3\xd1\x89\xe9R}', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r0, 0x0, 0x144) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000040)={0x0, @remote, 0x4e23, 0x3, 'rr\x00', 0x3, 0x5, 0x75}, 0x2c) 03:34:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000200421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 559.404939][T11739] binder: BC_ATTEMPT_ACQUIRE not supported [ 559.439201][T30288] libceph: connect [d::]:6789 error -101 03:34:43 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1, 0x404000) ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x20000000000}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r2, r1}}, 0x18) membarrier(0x4, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 559.462620][T11739] binder: 11732:11739 ioctl c0306201 200005c0 returned -22 [ 559.481606][T30288] libceph: mon0 [d::]:6789 connect error [ 559.547417][T11790] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 559.560161][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000300421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:43 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x3f000000, 0x0}) 03:34:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) sendfile(r1, r1, 0x0, 0x144) 03:34:43 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7a00, 0x0}) 03:34:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10200, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000000)='{user\x00', 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 559.738528][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 559.750935][T12028] binder: 11997 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 559.750959][T12028] binder: 11997:12028 ioctl c018620c 200005c0 returned -22 03:34:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008915, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) [ 559.817344][T12074] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x800, 0x0) sendto$x25(r2, &(0x7f00000000c0)="94837d7ec162aec75eeac96be8d5126b49bc83779fc5ef6d0419654e4e19707ecba44c4ce26fa84e4391fc202ca32531e878b19264044d3c5efc1dcbf591f2ed67e75073facd167d7f8844041247db7b56cbf28b8982", 0x56, 0x0, &(0x7f0000000180)={0x9, @remote={[], 0x0}}, 0x12) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000400421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 559.890083][T12074] binder: 12052:12074 ioctl c0306201 200005c0 returned -22 03:34:43 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x48000000, 0x0}) 03:34:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) 03:34:43 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x80000001}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e21, 0x92b5be1, @ipv4={[], [], @remote}, 0x9}}}, &(0x7f0000000100)=0x84) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000300)=0x5, 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000001c0)=0x6, 0x4) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0xffffffffffffffff, @dev={0xfe, 0x80, [], 0x8}, 0xc11}}, 0x24) [ 560.020087][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000500421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 560.135444][T12371] binder: 12333 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 560.135457][T12371] binder: 12333:12371 ioctl c018620c 200005c0 returned -22 03:34:43 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x1000000, 0x0}) 03:34:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='.U/c\xbe\x95\xe3\xd4p\xaf\xf9=\xe8\x85\x91\x10\x80*\xc2\t0\xf6\x03\xd73\x14cpu', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe00, 0x8, 0x9}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={r4, 0x376706a, 0x80, 0xffffffffffff0fed, 0xffffffff, 0x8001}, &(0x7f00000001c0)=0x14) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) 03:34:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) [ 560.312871][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x400, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) sendfile(r1, r1, 0x0, 0x144) [ 560.362242][T12470] binder: BC_ATTEMPT_ACQUIRE not supported [ 560.385584][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 560.420538][T12470] binder: 12434:12470 ioctl c0306201 200005c0 returned -22 03:34:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000240)) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000640)="7255dd1d39a33acb301d9adb70142ffb69d307ee464c8c0b12f8ef63a22e1df2804d54eb90f8f77fee7611cddd06b0c895c6dbb813252ada8ca28c5d409c8b334d703f5a27508ae0cc", 0x49, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001900)=[{&(0x7f0000001940)="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", 0xffffffffffffffd5}, {&(0x7f0000001840)="5c52a15d91b4e8de2002bbb9552d592a09d0c92ed094dd4b412a8c2f433369feb9d32fb39c10a48c3e701b218da65c585185c1cce528df363affa5eca677100dc3eda9131e572acc2967d258254eb0e7fb5649bcf493969bc70f60ddd0025d2cc704ed8a438473215c9f1d53206ab744854567cbabb149803036ac0ff318d0b33461563d1df93ba641fc5fbd4c46b39fb634cd2d5e27d2d1a98b7e1b5440b3"}], 0x2, r3) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0xfffffcd2, 0xfa00, {0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000006c0)=@assoc_value={0x0, 0x4}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000740)=r7, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r4, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:44 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4c000000, 0x0}) 03:34:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000600421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x800, 0x301400) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 560.607196][T12694] binder: 12683 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 560.607209][T12694] binder: 12683:12694 ioctl c018620c 200005c0 returned -22 03:34:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) prctl$PR_SET_KEEPCAPS(0x8, 0x0) [ 560.653098][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:44 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x2000000, 0x0}) 03:34:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000700421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) openat$cgroup_subtree(r2, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) 03:34:44 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x60000000, 0x0}) 03:34:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) [ 560.887432][T12898] binder: BC_ATTEMPT_ACQUIRE not supported [ 560.906165][T12898] binder: 12893:12898 ioctl c0306201 200005c0 returned -22 03:34:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000800421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 560.972508][T12903] binder: 12900 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 560.972523][T12903] binder: 12900:12903 ioctl c018620c 200005c0 returned -22 03:34:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2040106}}, 0x322) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x3ff}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 03:34:44 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x3000000, 0x0}) 03:34:44 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xfffffffffffff001, 0x4000) mq_timedreceive(r0, &(0x7f00000001c0)=""/10, 0xa, 0x40, &(0x7f0000000340)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008915, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x8000, 0x142) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x8, 0x8000, 0x204, 0xfffffffffffffffa, 0x5, 0x100, 0x6bcb, 0x9, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={r4, @in={{0x2, 0x4e20, @empty}}, [0x1, 0x3, 0x8, 0x7fffffff, 0x0, 0x5, 0x200, 0x400, 0x8, 0x9, 0x401, 0x281b, 0x1ff, 0x7fff, 0x1]}, &(0x7f0000000100)=0x100) sendfile(r2, r2, 0x0, 0x144) 03:34:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r2}}, 0x18) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x60080, 0x0) 03:34:44 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x68000000, 0x0}) 03:34:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000a00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)="d743e9c26b5cf79c8f96ce8480ba39f5b77f64d289a208e5c333c8ae19615aca8f5d02e71be47116bf82d88e70b769eba8cc1679e17255efa548f0c4f70c82e39ad0219b156a6fc8d0ede8b6ffa2eff3984d1afad521e1bfb7fddfe79b16ddb0f448a868daa6a31db44d7b46a488c8b8cc612e78bfdef17e212ae5c833fd99f6940c6e259253fb8b", 0x88, 0x40800, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 561.426731][T23894] libceph: mon1 [::b]:6789 socket closed (con state CONNECTING) 03:34:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000c00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v2={0x7, 0x1, 0xf, 0x5, 0x37, "67392b4b3db391436d3372e8f0efbbac50276e79fa5129ffc6cc7bba1637eb7c001cb133b6984ed7f8ca7f6469bd92f580f400a4c94cef"}, 0x41, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendfile(r1, r1, 0x0, 0x144) [ 561.511386][T13240] binder: 13239 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 561.511399][T13240] binder: 13239:13240 ioctl c018620c 200005c0 returned -22 [ 561.526165][T13246] binder: BC_ATTEMPT_ACQUIRE not supported [ 561.536337][T13246] binder: 13236:13246 ioctl c0306201 200005c0 returned -22 03:34:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x101080, 0x0) recvfrom$unix(r3, &(0x7f0000000580)=""/239, 0xef, 0x100, &(0x7f0000000680)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) rt_tgsigqueueinfo(r4, r5, 0x33, &(0x7f0000000180)={0x22, 0x9, 0x3}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000000100)={0x0, @broadcast, 0x4e24, 0x3, 'ovf\x00', 0x4, 0x1200000000000, 0x54}, 0x2c) 03:34:45 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6c000000, 0x0}) 03:34:45 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4000000, 0x0}) 03:34:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x108000000002) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5) ioctl$FIONREAD(r0, 0x5437, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x40, 0x2) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000180)) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x240c0) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000080)={0x5c, "6c0a6dd76e02cc0baa3a82bcf8d20687630d66b7b160cfd82a40d7556968bbc5", 0x3, 0x2, 0x4, 0x0, 0x0, 0x2, 0x4, 0x10001}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 03:34:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x238242, 0x15) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000180)={0x7, 'syz0\x00'}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'veth1_to_bridge\x00', &(0x7f00000000c0)=@ethtool_channels={0x3d, 0x20, 0x100000001, 0x200, 0x628, 0x8, 0x0, 0x107, 0x7}}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000e00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 561.743147][T13561] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 561.839383][T13581] binder: 13577:13581 ioctl c018620c 200005c0 returned -22 [ 561.885005][T13586] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa02, {&(0x7f0000000340)}}, 0x10) 03:34:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000f00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 561.934350][T13589] mkiss: ax0: crc mode is auto. [ 561.947328][T13586] binder: 13585:13586 ioctl c0306201 200005c0 returned -22 03:34:45 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x74000000, 0x0}) 03:34:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) 03:34:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x3, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) getsockname$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r2, r1}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:45 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x5000000, 0x0}) 03:34:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000001000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:45 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) [ 562.278519][T13929] binder: 13921:13929 ioctl c018620c 200005c0 returned -22 [ 562.322210][T13928] binder: BC_ATTEMPT_ACQUIRE not supported [ 562.390434][T13928] binder: 13925:13928 ioctl c0306201 200005c0 returned -22 03:34:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) 03:34:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000002000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:46 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7a000000, 0x0}) 03:34:46 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6000000, 0x0}) 03:34:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) [ 562.681818][T14256] binder: 14255:14256 ioctl c018620c 200005c0 returned -22 03:34:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000002800421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 562.856509][T14342] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:46 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:46 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x100000000000000, 0x0}) 03:34:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000003f00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 562.906212][T14342] binder: 14290:14342 ioctl c0306201 200005c0 returned -22 03:34:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) 03:34:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xfffffffffffffdfa) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r3 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x800) close(r3) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000180)) r4 = socket$inet(0x2, 0x80000, 0x78fec604) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={r3}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x138, r6, 0x305, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @rand_addr="d37625c438c7836b4f2e67ed38bdc759"}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x470c529, @local, 0x6e64}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @ipv4={[], [], @multicast1}, 0x253e}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x25}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 03:34:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000004800421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:46 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7000000, 0x0}) [ 563.139855][T14547] binder_ioctl_get_node_info_for_ref: 3 callbacks suppressed [ 563.142053][T14547] binder: 14524 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 563.142067][T14547] binder: 14524:14547 ioctl c018620c 200005c0 returned -22 03:34:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) [ 563.302656][T14607] binder: BC_ATTEMPT_ACQUIRE not supported [ 563.361586][T14607] binder: 14606:14607 ioctl c0306201 200005c0 returned -22 03:34:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000004c00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:47 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x200000000000000, 0x0}) [ 563.445271][T23894] libceph: mon1 [::b]:6789 socket error on write 03:34:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) [ 563.516295][T23894] libceph: connect [d::]:6789 error -101 03:34:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 563.571864][T23894] libceph: mon0 [d::]:6789 connect error 03:34:47 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000000000002, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) [ 563.621961][T14902] binder: 14864 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 563.621975][T14902] binder: 14864:14902 ioctl c018620c 200005c0 returned -22 [ 563.664202][T14881] __nla_parse: 13 callbacks suppressed [ 563.664212][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:47 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x20000000, 0x0}) 03:34:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000006000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) 03:34:47 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x300000000000000, 0x0}) [ 563.823422][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 563.855109][T15119] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000002c0)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xcd48, 0x400) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000180)=0x8) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000500)=0x1000, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000001c0)={r4, 0x40}, 0x8) connect$rds(r3, &(0x7f0000003bc0)={0x2, 0x4e21, @rand_addr=0x20}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) io_setup(0xffffffffffffffe3, &(0x7f0000000580)=0x0) io_submit(r6, 0x9, &(0x7f0000003b40)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f00000005c0)="2fdda401f95492f8f1f801ae5166636c4507856e8312cb337ac827b5108a051bce682ebe14f196a41f01b281afd76d8a5e15cd9cbd7d185b739656fa9a2e0f1ae0e01cfdf9ed91cc18", 0x49, 0xffffffffffffffff, 0x0, 0x2, r2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x4, r5, &(0x7f0000000680)="65ecd36cabb055b3b3c0fc00f00dc3c61bc83581840a87e618278baa4d7fd2463a2a351661d6a05ee04be329431b7426b711141655ac0e72a662138262e3f0e25a7068a5c3bc4ed62d82cf967dd29747f280b982310c7823d15e59b99f7e663d4ffdc46bf5f8ded9f3d85f68548eb6000ae1633c9d02a48162bcc4e73c0b0801c7d4ac8d2520fd592f36feac2d3e3a0038b2b6b3", 0x94, 0x81, 0x0, 0x0, r3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x6, 0xffff, r0, &(0x7f0000000780)="cad8c181ce3b1f5a845e20e386eda7d1f6a29b8a3af03555203eec7f5ad11092086cf501edd162385b14f5ebdb50a38a1e34301d18c4684642618c89d772506e76133fb78a617caf50b13476d13d48aebc8326b0841d", 0x56, 0x2, 0x0, 0x1, r2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x1, r2, &(0x7f0000000840)="d1cde2d3f71e9f06e11a0ddb5ecd4453813280062b620564014b160eb1eae256a985dcf7bf9492e1326898b20f3bbf55963bcc3944f5e5303671b87c97f06a220a9dcaed8dfc9a03c8491e739cb8ac2719896672e7a94ee17c7851f4f4c6c93284a084e99099a7024e5663e9a1a5e4a2b6", 0x71, 0x2, 0x0, 0x2, r3}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x2, 0x7, r3, &(0x7f0000000900)="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", 0x1000, 0xf43c, 0x0, 0xc420cd923755fc2b, 0xffffffffffffff9c}, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x2, 0xff, r3, &(0x7f0000001940)="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", 0x1000, 0x401, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x2, 0x2af, r3, &(0x7f0000002980)="0d8b1ebae89943ee79b3550272982286e6adb3f058ca9a802e3733280b7692a04350e1b523ce3d898e8b7beb8a582ebf3bae764aff011e5848581468b7c2a2f13a470d2a9d3c61667458c686bc81e470e1a5cf9f2bc5246e869bce99f141762824f3067da5e1b9fffee82bd033387e154939", 0x72, 0xa03d, 0x0, 0x1, r2}, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, 0x100000001, r2, &(0x7f0000002a40)="e2bc7d885da5d151f665fb5a862eb237cedac65b9e907d56147b6a725dcbcc8b8a9cf8c65b89a9ae679d3684836698adbd3b43e424f13e4d95da595278f999f8d1ce36707879e5d168a7509f268db0b0cda9d62cfbcffa0f09cf1925534555b76ec3d42c1031277a8148aace7b571e74c9efd3d1564a4472e2efe71121e02a4407b9619df9ec2974edc1609ea10486014db35981a9185ad1b1e50494810be718925f77fe77d2c0f6a273eccbf15804e4adc9c4ba12249aceb6e3a990e11b198bd974eb39aabafc29f18bd139ef3ab05337a6952ea92b9c47fdcb2e69b356236ef921426b8b4ec933208413a346bf14b734fa2621503e9ed32143ce17f0c16e6731aebcabfe080c52f1cf4aa28631e078d6722bd4a277032393a2ce20e85806c88b7bc3217079408661d5e9821227deef1a097a79c62b61f666b4b4683961190924ec13da010ae1d517228f7d85045401c7cf0ae0201c98a39d9ee1519aedbf4abf3e5d0d7c7a47d5c10e0cb438b364494e9fe8b9ff7c763f6c660a69fda47ddf170c79f5b23432066f1aba46739d2d39c4d95c848f178af5d3ca59cfd8ffd696386c8544e1580c46ce294cfee9baad853c1be1a3a48b2e6e09a54b37a737ef54ba7d077a405a316c5ee856b71bffd501241d6365ec00bd6fc21412b8e6a32b091dd226c366dc53a7bd8f6b72b9940b463c37abd0f7073a548c4e434f52bd0a13b952536e7965a65696c334085efeeb0ca393153103c58ec9d3d53f2c4855d00c3dfbe1b26f7110f5650acaf214efd6aca9447bc10a9b4a73bedfea32bc1d5b07444ca193f208ca475a400159cb9e1292c6e8b316e9951080f73bbfd3c6918e36be45576886f16d8f0999f8677f4c258e24869afc9df9d05c502b816980053feee547664442a82bdedca3ea8ecf96513b1a5bf19de7f082c7e0c96d323f0d96fe08fa4ad4fe74e9f39c2469805c89afa43f0e988013dc671616e74e9f433e721b481047f2d5cc06b0b7b473c68ec5abb8448e4f5ec485cd135b45fa77974644ddba86ba5c511575ab3022b2b4bc6da478bd7753d0dcc0ad058dc223ec7da0ac9ea6b43522a3b7fddcc7781935a757a2b7dd7e0c659314335d393f5416247789c4808fccc0eb00ee7f54a50e2e67f9a808b2d2298add0bb80dc094737e48375dcfcdecb00610d3cf6af8d28331f2d0d490026a6df2d191dbeb8b2857f21b3a0544418393b21ef6e7015041de4504a70964a9e919fadf8a150132d7bae1c08615b109e8a80a76de7f313139ae93915ef459f860c02c70a39f9292910b23f0e8a076282e35f2a8c8c69aea7047f236940e5dce12db6af1971886917d75046e1cd36fe29d1b15fb5bb12825229c8753a887c0bb31c9466e4b0b7316c11d716b0ba5c3c5bd830292f68b3d2e158c6d14c48008b7170a4974db0b49758af18bb39203dde542bb3528e8067b2ed9c00ca72a26e9b98758d9aed225068113afc16c96ab5c35e4f84dc0c58091458ff67015fa78aee2e3f4b9c0a96fb093675df5d29302c6dad996906731b3769c2b062d13547d9a0678bda70e4b275cb83b21d5effce48ee255d9e75878e772afc031b6f00746a8d756b59777acbfbbd78f6d269bd5b347608b9b886bef7f7a0bfdc9ced09632bff585aab2a6c0513e111c6c6ab0ed6538a69af3b3353aebf9d294ebd7c1037b675fdc441f87b849bdd5a9440d83c5cbcca2267a625c5f26211f8ae4f55094aaf8f67d9ab90ecbb70154a68c1c8c92966c0722760cef9a29e7160050ec07bc47c01fb65a6bf314be6c069b48cb7aabc3880201ec08be5dcea86ddf0b4e14633643eb7ec2cf1290ff1c637d79044b19466ff900792da5b483dcbaf5d93d86184ff0ea8443bcd28ed9dbd740078eb659d733349c3f46cf35549fd2461b1963760cbf3e2ea9725014364039c01884cdbff2244e3c9b605e0b27efd4d271c82c91b4c20cefbb6dfb8cd521b103d6552d79ccc738a416a097652c1461e5bed42044dd66198a16799424fd3f0e7f7b11062e66ffaba68cba85762b4910944e5e3b857d67a3148cc544112676222a860711c747bcebf38e62166fba99feb3ef48b48c2a74b5bc2059ec726059f8da6ba57b6545b4e09e8710978efde93b033a1d7a81eb8fccc84ee6af8e2dbc79212440d5a8336fef54a90234b9aea9dd4e8e7f5f8909919add6cdda0d6e36025e3e3796ae7d319e00793bd2ac3b9253fff04ccacd2da02a1c346e879b0289a9ed86644492cdc14ad6d87d5b35ecc07f163ae1c5237628e4b3fe5b322da7ec929c4d1cfac6753f102f963d25b5790651afacdc0aef4a9ababa61649338412a9038493de5fd8edeaa7043d7b327c1e1bb1a873eb50a627aeaa2c5dd6490715c07cbedb9068220ab840b01a7daa489a9a6b14ac8e6683c86d78684d9a05add2e48531693d5b201360bd7dfbe53d2c83d63754e0760f58701e12a08b050fd62b91296cda8a1e68d48a0051448c496cec6b56c1a83c3bad243b398a502ed1e9cc0f05a86deb0ae0b99229c07b84219b88ff5065f9e6435010924b347430bb7d768452215b11452a55abb7153fc93cc7f803ea0ad8340e15e0c9967ac1a289e2c50ecccc1c905e433fe12417cf3683a2983e9beec46e0191edfbcb08d97aea72cbd3a33a2f29c716c064903748a310f182eca93412e633e3aa3f70c5c976625b74f4e294fe18d9f563a2ac25d4bcfeb660cd9edcc21af6aec8d76feac1100a0b58f65bb8362a4528da5c4bea722d0c9da6e80698d83e0774e249e6ea236a92e189d35b8498794e58a816a913c9aba52d9da6b6f7fa96ce10e2204f78eaf771124d34d90da90ef0db20a8c32841226b3bea8c76e741facefccfee1416cbd9b047abfbead2d3ae6aa1accfe1c645d6a4fc33dda35306a97188485da6b585c0954812aa29d76c0bad8a0cfb86da978ba075177538426a109e6f9f0b68d86e2c3b9d20f0dd56af539954c9c0671e8b593187cc001107ea97114ad20ca973fe7fc4b05f1260bf2f99163500dc50740b0d33991ba92131ba8fb2d0a85b42fd14e87af451a8d08cae7cce06fc8b470382f4391b80b3f4e660abebb4f70566f30e4d6d2650ffa505210c46d3c37645f6bf756ed613495909d48962a7b7259b309e94088a67d0acd86785a55a65e4434abc7fc22246a3cd2844476ef70454bdbf5dfd2fb8d7a02b4ad5596ebcfa89258df41d748f2efedd4df8fab4188acad421ff8b2a80fc674b5278a91dd9b40f9e2e9376214be1170f97603a32320e24382e604b8376e0b90e0d9062c985e805daa29bc2ec181e49fe0a4d7b631ea91e9c11dfa661cc0741e112cc887872faa05cac65b898280877b28692eb00be8f034bb84c5c42fe96d1a87ff2f477cbdcfbcc25f7201a4cb0af7759a672e927c74c10c5a5c78aa91d6eca7c42ffba077c607082c751af72f73cb3a9c0bd92aecf930508a60cd7ff294d801077bfef2a951c1d352991f00665ecee6973239d33ce8e7e1e70aae73aa9b68489329b9f220b475ce3d4af858b771005bfbf9a684f9ad6a90cc01fda36172837cc411e3dd19ab079917c5cb49085757dee64cc0837936a73e79dfe29cc8589b613783d228e74d5b5474e0c29d06903ff23907f1dff229af9c2992557aa1f3c9ba811af93da49b83801da0679211d97b008a35f73aba5387dc59a0cd53a4df856a8183e5784c66c47de344ae24c587e29230d9b8448600eb6288615ff4423f3498634fd8dad8e71c9918ef05876db3925af28637dbf2983b152e68c682df7da86e46453fdf6234e26a750463ca21f56b0358de16e5a13e438dfae02eecf63d59263fc5a115b6f37b19161d793a3ff3b546aa78909c1373f8f1bb5ee424f18c5ab1e038a589e101f038a2ba34303e3cae83e18e46c487d4e4571cc4ea3d733479db43c8da165dae1da2c00fa3b5bea0b0f98782cd235d700a488dfe98304902a7a9ffaab9fcbadd960335c0bd43c16df938b9cdae5d9b4100653dc579790a016db67a835da83e365e5b6415b489e4eed65dff07fa6972e067896ff0abe50c149e18661121b6d34cac571e20e9c03392a454fa2cc56e24f9b8e47695ecbdeb3a3d0a1cd2a743957ff3d4a9ea761e15b328baac0672f9bd2c7a02adc12673930e947b612f1e966c504264c15d3a58676f6e4d460c871a715bf5f064eb11244e400697dbd055368fa70919d97472bf746165b254efd19a15fbbeffeeda4d52a75a8ba465f1e55e6bd0465873ccf3bf2ff901f5190edb120eb20e4a851b64d6171ae472a3dd2ece8a8eed00cc37bc19b13e7f05e71ce3c70f9e0ea8038d8f965a86a1b875767576851f436cd19cfefe8f17f94eec298df6e5a2cf8d1dd44467ef29a69c5263cfdf02111f4da0361e20ea1a6d59a021185755a8c72a5d61b925fc786b9a6fe2d514148a898f4f2b39b43c63f374552694aafd8a8b162700cda218df03ebd8dc45bcbb704e2dc54922e34e1b3c76021ea2a97d351c1d76ff552801ef7db9c59534179540bc97b30563384d0e0f1ea15859d8e9f42c9c059ea0df27ecd9efc13b84c38145d9e935131fe6bc20d247618424db477b09817b3978b4eeb8f9d9022dbaba813284c7eef461bb0649a58e3aadcde7e6a6f564c13a4fd33cc867583a58ee3d46e11c835ee8e596cb722e3d40cac2c00cce1cd7f0fb14b2571a64aedb98329aba8aa724c58cc7bf9a0fcd4c31061288fa8e110ebbc5c1e08ae9c9d98781b37ef8d5db6247520472a49dad881aa92847b3f6683c029a63916563f5a1128a3775f5634b973a012767c6bd61e31d3d0632841ec3077dd76b82b6e40de32f1f135f78939db0e6e4548f101207bdb98729e10dbbd58be33eb23cf4abd1a7095fc6e0dfcb9080233b894a06d83d7cc1b00eb7080cca1c885eea6f5ceb26653fd31f3d25964b4accff5ee471dc41c41c96a9a9bd3a2a507f11c0fb10f92aff1a18c7ba5b3b5fa36bf1478e78176395df752777e6fb353299156804b9aab506bd59342a38290bb6b1fb92b7329b05ad64c1736f894ce1816e701d23d6d209fa1da5f1527705e7f65c73aa8923bcccc99ebd324896698a95ff12df7f0a25b4333e26647e6930e684cbbf74e1e98cdee2e852a3b2210720607dac282b9d890051654977b2d691073463ceb424dfd479dcbdf6414704041b4f14b99771fe6875d75992a39b41c78ba4a47cd5ea9aa022fa0cad0609024810ab852b5c33b8b6ae5a1179563bf21d0985b2016fac57520581c811b71c89a6f5fde1dc5175b262729d5f96c41341918c1947b20326c3405f7b9bd47e0cb7a0bc725b8aa177b375b82a906243552a0b67ff99a2051f164d6f3d0dccb234ff6748d6a2c119596df5c1293b139cccc89382f837fc4db512c8b9666f07222e1e64c5115562dacaa41c7ad6e8e994f4a5532616947e56c954a9197b7e428138dd7087533fd53889422d85cef75967b37b2b31798a60cde5b8afa3eed0fc0e4b255ea5a7cf1b82a1ba40e5193bc68ffaa34d9a7f496342f39dbbc6411c28197480e379083f78710b3f34834574e090fbc1ab28d0cbec792181bba4a6ed7c1b9e1962c6476a666d50d45489ba7bc01c0eeeddaa580d99adf0c1664ec90349c10a226a490c1025a2c5004cf3180bff87bc7fc53e2fff0944183314559fda65d9583204a909e0a334ca0ad1337e9abf33f6905561a366a019b189bb2361a1ba435110ff975b3e4bdf09caf7f4689cc4ad92009fe76c022c0b1021ab6292e939daa4c982b00b57126baa90392df9397e4457c469b", 0x1000, 0x9, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000003b00)={0x0, 0x0, 0x0, 0x3, 0x8, r5, &(0x7f0000003a80)="cdc642d23f3447763a0a0a5c365442ed15eaeb05dca8ee26577806db66138152646743115579351d2c53ccffe49dabf36194784cef8ef568719c5a7a5d3e71d8a807a68d9d57bea0194b80c0e2202a73927655c3127e3ab5b735745eee2dd51e", 0x60, 0x3, 0x0, 0x2}]) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 563.898519][T15119] binder: 15069:15119 ioctl c0306201 200005c0 returned -22 [ 563.939794][T15151] binder: 15145 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 563.939807][T15151] binder: 15145:15151 ioctl c018620c 200005c0 returned -22 03:34:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) 03:34:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000586500421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:47 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) 03:34:47 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x400000000000000, 0x0}) 03:34:47 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x3f000000, 0x0}) [ 564.142898][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 564.279313][T15479] binder: 15475 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 564.279327][T15479] binder: 15475:15479 ioctl c018620c 200005c0 returned -22 [ 564.280229][T15484] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:47 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000000005000, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000006800421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) [ 564.335589][T15484] binder: 15478:15484 ioctl c0306201 200005c0 returned -22 [ 564.408423][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 564.408680][T23894] libceph: connect [d::]:6789 error -101 03:34:48 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x500000000000000, 0x0}) [ 564.453937][T23894] libceph: mon0 [d::]:6789 connect error 03:34:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0xfffffe52, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffff01) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) 03:34:48 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000006c00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 564.578470][T15781] binder: 15751 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 564.578484][T15781] binder: 15751:15781 ioctl c018620c 200005c0 returned -22 03:34:48 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x48000000, 0x0}) 03:34:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) [ 564.717725][T15860] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:48 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) [ 564.764134][T15862] binder: BC_ATTEMPT_ACQUIRE not supported [ 564.776876][T15862] binder: 15861:15862 ioctl c0306201 200005c0 returned -22 03:34:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) 03:34:48 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x600000000000000, 0x0}) 03:34:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000007400421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:48 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4c000000, 0x0}) [ 564.925576][T16027] binder: 15986 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 564.925794][T16027] binder: 15986:16027 ioctl c018620c 200005c0 returned -22 03:34:48 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) [ 565.053227][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 565.082958][T16154] binder: BC_ATTEMPT_ACQUIRE not supported [ 565.096292][T16154] binder: 16149:16154 ioctl c0306201 200005c0 returned -22 03:34:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) eventfd2(0x6, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:48 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x700000000000000, 0x0}) 03:34:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000007a00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:48 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) 03:34:48 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x60000000, 0x0}) [ 565.426538][T23894] libceph: connect [d::]:6789 error -101 [ 565.436247][T23894] libceph: mon0 [d::]:6789 connect error 03:34:49 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x8000000000500e, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) [ 565.490780][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 565.507216][T16374] binder: 16368 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 565.507228][T16374] binder: 16368:16374 ioctl c018620c 200005c0 returned -22 [ 565.525751][T16369] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:49 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000004c0)={0xc, 0x8, 0x143, {&(0x7f0000000340)}}, 0x10) [ 565.539531][T16369] binder: 16367:16369 ioctl c0306201 200005c0 returned -22 03:34:49 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x2000000000000000, 0x0}) 03:34:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000008100421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) [ 565.715158][T16627] binder: 16592 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 565.715172][T16627] binder: 16592:16627 ioctl c018620c 200005c0 returned -22 03:34:49 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x68000000, 0x0}) 03:34:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x180) ioctl$SIOCNRDECOBS(r3, 0x89e2) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 565.767611][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000ffffa88800421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 03:34:49 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x3f00000000000000, 0x0}) [ 565.895059][T16777] binder: BC_ATTEMPT_ACQUIRE not supported [ 565.923887][T16777] binder: 16710:16777 ioctl c0306201 200005c0 returned -22 03:34:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) [ 566.011445][T16901] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 566.035566][T16930] binder: 16900 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 566.035583][T16930] binder: 16900:16930 ioctl c018620c 200005c0 returned -22 03:34:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x7ff, 0xf, 0x4, 0x82000000, {0x77359400}, {0x2, 0x3, 0x0, 0x40, 0x5, 0x6, "11422fb2"}, 0x1cbc, 0x3, @offset=0x4, 0x4}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0xa, 0x0, 0xffffffffffffffff, @mcast1, 0xffffffffffff8000}, r1, 0x1}}, 0xffffffffffffffd2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80200, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:49 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000000005015, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:49 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6c000000, 0x0}) 03:34:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000ffffff9e00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:34:49 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4800000000000000, 0x0}) 03:34:49 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 566.294022][T17148] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 566.324840][T17150] binder: BC_ATTEMPT_ACQUIRE not supported [ 566.357397][T17150] binder: 17146:17150 ioctl c0306201 200005c0 returned -22 [ 566.381768][T17157] binder: 17156 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 566.381781][T17157] binder: 17156:17157 ioctl c018620c 200005c0 returned -22 03:34:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000008000a000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:34:50 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x74000000, 0x0}) 03:34:50 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4c00000000000000, 0x0}) 03:34:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000ec000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 566.648821][T17379] binder: 17373:17379 ioctl c018620c 200005c0 returned -22 [ 566.671578][T17377] binder: BC_ATTEMPT_ACQUIRE not supported [ 566.684725][T17377] binder: 17376:17377 ioctl c0306201 200005c0 returned -22 03:34:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0x16, 0x8, 0x143, {0x0}}, 0x10) 03:34:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000fffffff000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:50 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6000000000000000, 0x0}) 03:34:50 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000000005016, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:50 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7a000000, 0x0}) [ 567.153184][T17702] binder: BC_ATTEMPT_ACQUIRE not supported [ 567.154355][T17699] binder: 17698:17699 ioctl c018620c 200005c0 returned -22 03:34:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x200004c8, 0x143, {0x0}}, 0x10) 03:34:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000fb00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 567.214918][T17702] binder: 17700:17702 ioctl c0306201 200005c0 returned -22 03:34:50 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6800000000000000, 0x0}) 03:34:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x7) 03:34:51 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x100000000000000, 0x0}) 03:34:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x101000, 0x0) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@null, @default, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) r4 = dup3(r0, r3, 0x80000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x1, 0x3f, 0x3, 0x1f}, 0xc) 03:34:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000088a8ffff00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 567.426867][T23889] libceph: mon1 [::b]:6789 socket closed (con state CONNECTING) [ 567.461179][T18027] binder: 18026:18027 ioctl c018620c 200005c0 returned -22 03:34:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x200004d0) [ 567.537784][T18037] binder: BC_ATTEMPT_ACQUIRE not supported [ 567.571202][T18037] binder: 18033:18037 ioctl c0306201 200005c0 returned -22 03:34:51 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6c00000000000000, 0x0}) 03:34:51 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x200000000000000, 0x0}) 03:34:51 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000000005421, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xc00, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x9) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x5e, 0x143, {0x0}}, 0xfffffeb3) [ 567.713161][T18293] binder: 18272:18293 ioctl c018620c 200005c0 returned -22 03:34:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000f0ffff00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 567.773012][T18365] binder: BC_ATTEMPT_ACQUIRE not supported [ 567.784539][T18365] binder: 18332:18365 ioctl c0306201 200005c0 returned -22 03:34:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x6000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f00000000c0)={0x3, 0x18, [0x4d33, 0x10000000000, 0xd80a, 0x2, 0x2, 0xeee]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:51 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7400000000000000, 0x0}) 03:34:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x121040, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000040)=0x31) 03:34:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00007fffffff00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:51 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x300000000000000, 0x0}) [ 567.991513][T18586] binder: 18584:18586 ioctl c018620c 200005c0 returned -22 03:34:51 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7a00000000000000, 0x0}) [ 568.073506][T18664] binder: BC_ATTEMPT_ACQUIRE not supported [ 568.093599][T18664] binder: 18615:18664 ioctl c0306201 200005c0 returned -22 03:34:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00009effffff00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x8, 0x744}]}, 0xc, 0x3) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, {0xfffffffffffffbff, 0x800, 0x2, 0xd6e, 0x3, 0x101}, 0x20, 0x200}, 0xe) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:34:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xae60, 0x101000) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 568.232706][T18895] binder_ioctl_get_node_info_for_ref: 5 callbacks suppressed [ 568.232715][T18895] binder: 18872 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 568.232727][T18895] binder: 18872:18895 ioctl c018620c 200005c0 returned -22 03:34:51 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000000005450, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:51 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x400000000000000, 0x0}) 03:34:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000f0ffffff00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0xfffffffffffffffa) r2 = add_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="7606892d1d8ce9c34fb0d27cb8085288fe7e7fa2841ed6a5a17f0422d7e7429e2011537f1b95b44c84af131d04cf1df4f133bdf08b0438eec35299403f8bfdc5347ab76dacaabb617dea2157ea0bcbc77338ea706f813eb8bef0bea63cb746a52ef3f097b58146d470590ff90fec1e1dbb63bc35c3b0a600bfcccd5f1e8638", 0x7f, 0xffffffffffffffff) keyctl$reject(0x13, r1, 0x100000001, 0xffffffffffffffff, r2) [ 568.472518][T19106] binder: BC_ATTEMPT_ACQUIRE not supported [ 568.502624][T19106] binder: 19051:19106 ioctl c0306201 200005c0 returned -22 03:34:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite6\x00') getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000580)=""/236, &(0x7f00000000c0)=0xec) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:52 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:34:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000002000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 568.653152][T19254] binder: 19223:19254 ioctl 81009431 20000000 returned -22 [ 568.675614][T19254] binder: 19223 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 568.675627][T19254] binder: 19223:19254 ioctl c018620c 200005c0 returned -22 03:34:52 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x500000000000000, 0x0}) 03:34:52 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x76) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x880, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x2) [ 568.710318][T19261] __nla_parse: 10 callbacks suppressed [ 568.710329][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000003000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x100, 0x80100) read$rfkill(r2, &(0x7f00000000c0), 0x8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$capi20_data(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="1000060004810900ffff0000000000002000c829d1fe6c3029da0ec20d9f0336ddf0c7ddcd64348a1a000000000000000000"], 0x32) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 568.848349][T19432] binder: BC_ATTEMPT_ACQUIRE not supported [ 568.869797][T19432] binder: 19410:19432 ioctl c0306201 200005c0 returned -22 03:34:52 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000180)) signalfd(r1, &(0x7f0000000280), 0x8) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000040)={0x3, 0x100000000}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x800000000400, 0x0) clone(0x2000020, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) sendmsg$rds(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/98, 0x62}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/40, 0x28}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f00000003c0)=""/167, 0xa7}], 0x6, &(0x7f0000001740)=[@zcopy_cookie={0x18}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001640)=""/234, 0xea}, &(0x7f0000000500), 0x8}}, @cswp={0x58, 0x114, 0x7, {{0x2, 0x7}, &(0x7f0000000540)=0x5, &(0x7f0000000580)=0x23, 0x1e97, 0x1, 0x3f, 0x2, 0x0, 0x70}}], 0xa0, 0x4000004}, 0x20044800) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f00000005c0)={0x1, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @remote, 0x7}, 0x1c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 03:34:52 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000000005451, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000140)='./file1\x00', 0x83) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x2) [ 569.010048][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:52 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x600000000000000, 0x0}) 03:34:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 569.218254][T19736] binder: BC_ATTEMPT_ACQUIRE not supported [ 569.222697][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 569.254894][T19736] binder: 19724:19736 ioctl c0306201 200005c0 returned -22 03:34:52 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0xfcb9, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:34:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000005000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:52 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x100, 0x101000) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x0, 0x0, 0x6}}, 0x14) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:34:53 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x700000000000000, 0x0}) [ 569.431906][T23889] libceph: mon1 [::b]:6789 socket closed (con state CONNECTING) [ 569.478772][T19992] binder: 19959 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 569.478786][T19992] binder: 19959:19992 ioctl c018620c 200005c0 returned -22 [ 569.484874][T23889] libceph: connect [d::]:6789 error -101 03:34:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/ubi_ctrl\x00', 0x20000, 0x0) recvfrom$llc(r1, &(0x7f0000001300)=""/70, 0x46, 0x40000000, &(0x7f0000001380)={0x1a, 0x338, 0x5, 0x2, 0x1, 0x0, @random="8011942db6ad"}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000080)={0xc, 0xffffffffffffff11, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 569.524401][T20014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 569.550112][T23889] libceph: mon0 [d::]:6789 connect error 03:34:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000006000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 569.599577][T20057] binder: BC_ATTEMPT_ACQUIRE not supported 03:34:53 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000000005452, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0xffffffffffffff81, 0x143, {0x0}}, 0x0) 03:34:53 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x2, 0x20800) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000180)) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x201, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x3, 0xffffffffffffff9c}) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b88a0f829a36b630394af3231d52808e8f5fd0c78ecc3766d8d11d439767b3ec9302fd9416866c4d30f1c920d8a13753a7350f311b23b7a34cf60090dc38d7e76964cfbc4c60c1032dd967b47cc8905a5a8bcdaa1c29d4d74a717b76750b85ccb14fe37637d0b7bb105329b661ceb79635ef0d075bf8a8075"], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@ipv4_delrule={0x28, 0x21, 0x8, 0x70bd2b, 0x25dfdbfe, {0x2, 0x10, 0x14, 0x2, 0x3, 0x0, 0x0, 0x7, 0x10}, [@FRA_DST={0x8, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0x4) getgroups(0x3, &(0x7f0000000500)=[0xee01, 0xee00, 0x0]) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {0x1, 0x2}, [{0x2, 0x7, r3}, {0x2, 0x3, r4}, {0x2, 0x0, 0xee00}], {0x4, 0x1}, [{0x8, 0x7, r5}, {0x8, 0x1, r6}, {0x8, 0x5, r7}, {0x8, 0x1, r8}], {0x10, 0x5}, {0x20, 0x2}}, 0x5c, 0x0) [ 569.645106][T20057] binder: 20054:20057 ioctl c0306201 200005c0 returned -22 [ 569.730073][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 569.768266][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x1d6) fchdir(r0) socket(0xe, 0x80007, 0x3) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'md5sum'}], 0xa, "e339291e736c8d9f3ddb4ec9187c49585fe75c6b238a860d28052d8881dde3f1de16c7111a5d55f13fab5f2c530efe9c3d11662ba7fe723c49268e4f7a77190d4f16d7e6dcb099c1bed7fd1ea033f1daf33c37ea3bff614fcaaf20a85de29aa295eab4b26a88857dad3d694b3b906f738c42583b84d28bd9a8335c52d019266b604862201b4d54557e5e656a18fd15fe708db672a8d7f4eb4d2ccea3411c1185803a7490aeed1b3a9a8ccdc0ef5657139d28f549156fbda85cd60f08385d1cbabc168cb3c4bc2bdf6893e284a88ec0555df74169fc06377c15b17e2a1f6d2ec4456a0504e8b84b5cc97dc46b8d84498c96ed"}, 0x104) [ 569.794023][T20191] binder: 20178 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 569.794035][T20191] binder: 20178:20191 ioctl c018620c 200005c0 returned -22 03:34:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000007000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:53 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x2000000000000000, 0x0}) 03:34:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x38}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000080)={0x6, 0x9}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 569.907792][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:53 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = shmget$private(0x0, 0x1000, 0x78000800, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) r3 = getegid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) r5 = getgid() r6 = gettid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x7, r2, r3, r4, r5, 0x160}, 0xff, 0xe1, 0x2, 0x7, r6, r7, 0x200}) 03:34:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000008000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 570.017865][T20488] binder: BC_ATTEMPT_ACQUIRE not supported [ 570.062780][T20488] binder: 20447:20488 ioctl c0306201 200005c0 returned -22 [ 570.093146][T20513] binder: 20496 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 570.093161][T20513] binder: 20496:20513 ioctl c018620c 200005c0 returned -22 03:34:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0xe3) [ 570.118674][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 570.131749][T20513] binder: 20496:20513 ioctl 5429 200002c0 returned -22 03:34:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000a000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:53 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000000005460, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:53 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x3f00000000000000, 0x0}) 03:34:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0xe, 0x1}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2, 0x3}, 0x8) 03:34:53 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ea029288d1cf1211c700abd72fa7b2c24a9839f7a935cb7b3406f28582ba98c83fd32ae7c18f01996ec1c79e3e28af0a5dfd505e31247d9f0759e1bf0e76ee39662408fb1c10314b39b30d62e9141636c1e01aa833388149af72d8747c9fb26dff3dd7b70fc711997b4e5efd5f8a533efa16ffe21852846c3d949b816fe1b93e6d3df1692536e76b80469c27e0d5b9afae6c30a8fcb4f8660fff4e94610d0187935684542ad3aeffe150bcfc9506ab25314f7f873a5541953be50855625d309aa6ce34171811803fa84517fc4cb9496f0a309d9580dee275"], 0x0, 0x0, 0x0}) getsockname(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00'}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) [ 570.363088][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 570.386689][T23889] libceph: connect [d::]:6789 error -101 [ 570.392487][T23889] libceph: mon0 [d::]:6789 connect error [ 570.397917][T20823] binder: BC_ATTEMPT_ACQUIRE not supported [ 570.439592][T20823] binder: 20819:20823 ioctl c0306201 200005c0 returned -22 [ 570.462536][T20833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000c000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 570.507362][T20848] binder: 20832 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 570.507376][T20848] binder: 20832:20848 ioctl c018620c 200005c0 returned -22 03:34:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x101, 0x1, {0xf8, 0x4, 0x2}}) 03:34:54 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4800000000000000, 0x0}) 03:34:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000580)={0x0, 0x0, 0x2080, {0x106000, 0x107000, 0x1}, [], "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", "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"}) 03:34:54 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x8001, 0x5, &(0x7f0000000440)=[{&(0x7f0000000140)="36aed26e807462422d14af83de8dd92808d0fcdc7353f2d2d238c670235d9c47f577c7e0b76445727718d4636aabaad3c22783d0001943d7f27be9d9c6eadce55b47c067be41ad73cbadf2ff6b27fcdee074147429de773fbc943907fd8330c1f1ad8c70495bc814630358a19f70ec5e7ca8d713f87a9e27332731058ece48399c22", 0x82, 0x8}, {&(0x7f0000000200)="d3c1fca8c53f94b4b785861244b2c69795525814de33de0f05ddf61ec06b67dc7b12c6c3b438a8f9e1e0dea9d07897a875997622ecf3e8e688ff72e62ecf9e561eb6ce4f47cc15fa53414275e6b6dfe732843a08703b57b98b6a6d44f9c8208dccbba283b3a36a76d5f348133cd39e61f0c9737a014ad5623471d3b23b4ed6038315d322847300341665ed4129f3cf9e5f3f256c5f6b1f0ec6f38624636d664d8191aa901e70719357188cbd86db32d2a2657172be26546c7933f658a562e6598095b0b87f6d87d2e77a5011f9c56194301ef96140f8c60ac403185b6bf75712ac5a90a77bc1", 0xe6, 0x4}, {&(0x7f0000000080)="6c90150eda8849513336f6b69f8149c3f5d22e25adb4c02697870dc609fae9aa10c6fdad71002558cf9d910415b6ab90e4b91f795461cf02179a021701f9064f0ca51aeaddfbdadaeafa89138914162a1a280980e91616d55af225", 0x5b, 0x5}, {&(0x7f0000000300)="edb41c1659a285c72bfa365995f953f37482b3f41bc1aea895aaf490a32c6448662af39c773d6351d7a67deffc0ba2e29eb0852b817c89de2ce7899ba7603a2f27bf7fabd9cdaaa450b39e", 0x4b, 0x7fffffff}, {&(0x7f0000000380)="839df912ed43dd0b97a5a216ac657dde64da8e7ba231ed986a9ffb4c34dbf8fe0ddeb67eabfdf19a2a6db0db0267ce3fd71d02a436a556fac4733cf27543b3fc863a68009707a0776b4e3dca8fd81d7eee44c2b7918b64edc285cde4a8e9724534f425f55e7a87a09a8c9ae84e18ff739e9c0bf3cfcd2ec73c971ddc74efaddd272136b012a6793e9422cfa04e588052e5ffc409478f874a55cf6470a8738c7c6cc7", 0xa2, 0x1ff}], 0x400, &(0x7f0000000640)={[{@shortname_win95='shortname=win95'}, {@uni_xlateno='uni_xlate=0'}, {@uni_xlate='uni_xlate=1'}, {@utf8='utf8=1'}, {@nonumtail='nnonumtail=1'}, {@uni_xlateno='uni_xlate=0'}, {@rodir='rodir'}, {@shortname_mixed='shortname=mixed'}, {@shortname_lower='shortname=lower'}], [{@uid_lt={'uid<', r1}}]}) 03:34:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000e000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 570.731467][T21156] binder: BC_ATTEMPT_ACQUIRE not supported [ 570.750534][T21163] binder: 21160 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 570.750547][T21163] binder: 21160:21163 ioctl c018620c 200005c0 returned -22 [ 570.771732][T21163] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value 03:34:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 570.776962][T21156] binder: 21152:21156 ioctl c0306201 200005c0 returned -22 03:34:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000f000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:54 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:54 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x4c00000000000000, 0x0}) 03:34:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000010000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:54 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x113540, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x9, 0xe200) renameat(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000001c0)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='rdma.current\x00\xa7j\x81\x80\xea\xdb8\xcd\x1c\a\x04Vy$\xfeG\a\xda\x99\xdev\xf2\x1f\xa4\xb4\xcf\xdf\xf4\xed\x05P\xf5\xcf\xb1\xc1\x99P\n\x85j\x95\xdfK\xf2\x0f\x0eN\x1d\n/\'\x18\xe2{\x06\xdcf00\xfd\xec\x05\xeeC\v\x01\xde\xaf\x03\x7f3\x87\xef\x1c\x8f\xcb\xa2DgT@\xc2b\x13A5z\xc4\xbf\x18T~\xa5\xe2\x00T?\x83g\xba\xdb\a\xa5\xf1\xafL\xb1\xe4\x8d\x85\xbb\xd2F7\xe1\xb7\xe9\xdaS\x1aK\x15\xe9*},\xa2\t\xcb\xba\x1fph\n\xef\xeb\xf8_\xa1\xd1Nb\x01[8\x82\xcd', 0x0, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0xfffffffffffffffd, 0x1ff}) ioctl$TIOCCBRK(r2, 0x5428) 03:34:54 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x700, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048010}, 0x4000) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="aa1721739eb8a0860e5ae4045a48916f9170df45fd73f468e4c8b7f30c24dedb491e3fc101f8b20c92e80e1d20e8407415bfd5aa8c7ae14ca9e927cda619878d7dedc7a6c15f7a7f83fcd5ce9ffd2f1e422ad42dae878073fdee469e7ce61dbc1d5802939759305c90aed61cab36c93e93672cd98201df63dd29aacaeae9a3d4af6cb4ae2ba274cb913caa6f70bccc9b50da9dabcb424e3d7d7167892da63b936792c2ec456af4e771786d0e9f2deb8b0ddaecd62a142efd7ec068"], 0x0, 0x0, 0x0}) 03:34:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:34:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000028000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 571.166377][T21503] binder: BC_ATTEMPT_ACQUIRE not supported [ 571.186712][T21507] binder: 21499 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 571.186724][T21507] binder: 21499:21507 ioctl c018620c 200005c0 returned -22 [ 571.200308][T21503] binder: 21492:21503 ioctl c0306201 200005c0 returned -22 03:34:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = getpgrp(0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, r2, 0x6, r0, r0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000080)={0xc, 0x30, 0x7, 0x1, 0xa, 0x4, 0x3, 0x38, 0xffffffffffffffff}) 03:34:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x10000, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000000c0)={0x7, 0xea, &(0x7f0000000580)="83fc3d7ce7abcc05950a49f44e138629752abd51a1347d5392b405562212656da549a4b3ebd273a2495a5447391dc062ae3a0a1133386484730109e8820b07fb784f09b74606d228ff08ceecf61e5756bc0ae91b3a3f6298b5a67bd80d0381b7dda85b97a5642180e6a7804a4c8d70779a71b87c70dd284e3d9a638cedca454586450f0f12e959431e67f52e80bc93e85ef8eb2121007530406f1fb6df9101d5a1ea5c5657c2cd77d741351c5d4cea09625dcd259976b10f46de206170ae2b0eca69d22337303bfeb9b2a1daf5b41c6bda960c5d2eab2a0b0a67adda0c3522668148044cecbd44a2cfd8"}) 03:34:54 executing program 5: clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00007f40"], 0x0, 0x0, 0x0}) 03:34:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000048000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 571.426719][ T17] libceph: connect [d::]:6789 error -101 [ 571.457122][ T17] libceph: mon0 [d::]:6789 connect error 03:34:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0xfffffffffffffd4c, 0x143, {0x0}}, 0x2b7) 03:34:55 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6000000000000000, 0x0}) 03:34:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000004c000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000040045017, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:55 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r0}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r2 = semget(0x0, 0x4, 0x8) semop(r2, &(0x7f0000000080)=[{0x3, 0x8, 0x1800}, {0x7, 0xfffffffffffffffa, 0x1000}, {0x3, 0x402, 0x1000}, {0x1000000000003, 0x3, 0x1800}], 0x4) 03:34:55 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4200, 0x0) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}}, 0x100) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:34:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000060000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 571.775143][T22052] binder: 22049 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 571.775156][T22052] binder: 22049:22052 ioctl c018620c 200005c0 returned -22 [ 571.798916][T22060] binder: BC_ATTEMPT_ACQUIRE not supported [ 571.805816][T22060] binder: 22057:22060 ioctl c0306201 200005c0 returned -22 03:34:55 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10001, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x4, 0x1c, "c6390b90442997583de9f8d2b3aa512c82bd9b5e9d324f20e2a09a955d37d1303cee1a1b5073e6e9a3da119e78349c5b34d41bb45b7f5b645c67c766ec1e8eae", "d0e3442e6bcd297b22f7ba29e27a130c27f672528b8a2d4cdbf3fd0a137ce492be18ef16c9e17ccad61263471881817f873fefe98bd4187993c1cf5dd47865c1", "e1bdb632f76db136246a50c65b27dd12d8caa47310a5cf4d26acec550e7dbd7e", [0x1, 0x20]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000140), 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:34:55 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1271e591300eaa8ef431325cfac177c7cd5d22b71ee092caa34d"], 0x0, 0x0, 0x0}) 03:34:55 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6800000000000000, 0x0}) 03:34:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x2ac, 0xfa00, {0x1, &(0x7f00000001c0), 0x13f, 0x8}}, 0xfffffffffffffd89) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000180)={0x1000, 0x8, 0xfffffffffffffffb}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000068000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:55 executing program 4: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "fd95941fa6d8823ba4b37eac03b69d91"}, 0x11, 0x3) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000100)=""/137) r3 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) close(r3) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000001c0)=""/228) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x1e2, 0x143, {0x0}}, 0x10) keyctl$session_to_parent(0x12) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000002c0)) [ 572.022106][T22386] binder: 22381 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 572.022121][T22386] binder: 22381:22386 ioctl c018620c 200005c0 returned -22 [ 572.127429][T22391] binder: BC_ATTEMPT_ACQUIRE not supported [ 572.160390][T22391] binder: 22389:22391 ioctl c0306201 200005c0 returned -22 03:34:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000006c000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x120) write$UHID_INPUT(r1, &(0x7f0000000580)={0x8, "5410a15736308d4e6cf46bc03cd55fc63f24e3b89dc75b22681f59f00c1b510e6805b4b705b072945b76467928ff32d14b7db489161479a94b364a74d2f997e5822607d6b3eaf555a2fe2acffbba1c5291f75f1bbe6f8bd37f87c1fcf31365cd86e09cf01a74404fa6ab2be4be3c84088cb340080b86eb0f3ec182ffd894e0fd651a283ad71ddeb931f916afaa0cdc668b6b26a384fc9b1c2dff492111c1e72f29b665c92b95baab357ae2ec27e8088bcf452289c1feb2541819857689cb053d83582471939cebfc197c56c099108a886538bbc389429f2df9e88c9b16693b511b7ccd15cc4fedbaa3cb9732c5a1a075854bec127037461502f59f388ee2355614b399db086a75fee7a0e5b98ea9ec21b28ce1d293254ba89fe0db556416e6fe3f74c03eec72e3107de77abd4d74e2b7fa869363e1264d43779fa4b146527a54c805a797032920a19fbe88d6ffff4573d880301b52977cb36e9214f4b07785f364f53f789d40ee12136e714dd10b8df88e563e71697f3533dfbb8ce89af134f2bac3d7aa58d2e213ec519a4ca34ca486cdb241d4272c2c5b77afa640aa2fc1206daaf0eca30a9812cb62132a093a51099b3d7df8de89ff189823789ba9edad036223ace7fe684b2c3e61b7ff1d3eee5bd86cab020c9199809038232e42d4b53e07113c72601a3ad29d0e6a9cd6cc9dced99f29ed5f90e860b382ee538f84a2e96879b0905be855df2a02f17dc8ac8317031a78371e75528e8926dc01941895a916f514f7e295710665c1a2243f642a7a6b23d1f65e9136df2cd655d5f0d7abbab11130909e66e4194b57f09eeecab3849c788b5472a4738e37386a91288a549a847ad7674ce0e6e9a8da5251c9103ec51847addc3ff86256326c5f7e68221af5fd430d4421dc1390aa2635b5e8ccc2806f6e4cedbed27b2d4a37c56d453b3127acd488f4be1c82ce59a27fa2fbc7825317cdc6af5b2ede189a8d5f063d6e08d7e9382e986c1fd8a6c3c30737d82ef53ab6a22bb86dea778aeec0609094fd3c537600a6831fea4bcb7aa7e8ce3b1e3b41a92db5c16efb3768d1e6307b5dbdfcc6843e695483193b1edb956e163b980f722e8b03718e0e3c6df8b0797b49cdea076f278b0bd409716b0be0e775121fa1fae2d2b89e3982c26beef25cb88e7bb645f638399d464c4cd9abc4081b76904c30059e23a0c7e57be70eeb907e802320c737365494bfe8a25a2e1df1f93a15ac0727664c6b8c978885c9842fb767af0f7d39d9869a4e2208e03ead29acf24bda147c90a7ef6a6f1f8a2f4fd77c0863218b8516065017df731bebd20dc46d8bae0aa7ddf0db8c3bd0f1606e962f1980bae648574563ef4a41f1860bda3012ca66972d28a99817a152b86150aca2280c20affd8e4d838a4ffe64db890c03dd38830906b7d5cdb04b46c27a21e892fefd3fa9eb9a1958cc070d02cae5103ab6afc79704023747dd8232d34254301803e99b7295db7202dad93a7aceafb096b93729c3731b29989c6e8a02a42f0f2a4ac75da80b1e4418b973545f79588e33852b498fe51f26992d2eacff5c9917989f1979b5aab62e7e891dc4a6eaff68582b043a23e2af6d720911762c810a1f8512cfbec2fd3c5d2e00fe9eee476ca86e1b91297aa10acfe42c850235b6948219839d058b26ad2146554e896be21fedc546bbe7bd03116b78f48a6dab535664364fc22532847f443cbb722478cbb3bf5f405846d32ef634855c52a1735de68a43532cc063da3b6ccb742b31fdde9706956feb8d8f1e4a7c0c56067d489ba0f6513e0f5f30de8fac94e9321aa065fac3e45a80515777b2497587aa1fa88f29eb4ea8bf86b1cf339aa366b628f597498b0947f8245215c093e0ed5264293b2f404493f68b9fc4199e4983e83904aa8cfd4b49850806d6c1e0b314f0dc2646aad4ecf081f2cece4e74a9b3684d8895cbaf5330af8ba841ae28bd8cc58bbc57637ab126160baa4b6dbb417b7b7d810d688031a4b4caa195b5da97b0c3698ce0a32436e9d2d71fb3dba81630785fadf9bfaff9aad0ce0a29494ee82bd1369756739e6ee966831ff457a62a6097e59cc944509f4bfbc94d98d0ebd1d344f8eefcfa6a260f4fd57facb49083a76432df2087927d8e2d413df4822bd63a94b6614cb6130ef8907613a6259a93ecc921691ba86563dced19070ecf6b38cfb9247a0efb29dd6514679aaebd1539bfc89ca6b46a5afd190f56b4d979cbb244b96f8a4643ecb41667a822e062441e2febb73fb247321d7d1700915799e64e95c9aab426921ffb48882ff4a0f01aacbb22f3a60c56e48b9cb718f7d00596512ce53c8fdcc6e4b33dcc212084b3b00296c740596c07f934e94fd97ec5750558af057d21b01c93caf8015cd6c0dace930a0523e2e56fd6aa623361bd3fd974d544dd78bc4610584f12238579c157c8d706f0772097becbc972238a65cf61cab03bd7c366a6e8c9636f0abec689f6ffebcf71333f5aa56986b838c9778a7c98bd08a999e973a2a0161b93b967ea15c88025c3ff9880397c59cadf4e7a24119d8f1e5a7574c07fdeb426021f9d86530b26abf432ef2dcd5b6a35abe89590e342718b613bf98c3eadae29d97330f0454440dd75b64e224dd85b9fa3f7c66c5c6e9a24ad3452e0a999712cdc48df21032dd081af690faee977797c9adfa6a6ea66a156daca83d0f7a48c4a2268e82a6ba8fc0855dad3d968cf2bab621e36e117949d55fbf07b89ad4c8d2a74ef9d9764be8940e80a27adae67dc5001083397a08de284e72c698dba5cc72b5501300cb383283e92660e87f66489ff9eccc627e915559c91adce841270f1df7dcdd5d28aa3452bb959d0cf26196e1739ab537c648db0af38fe14e37fdc535890587c533292c936685692a8239c4ae6e99ee2b038fef3515b5b560b1ea765c04dff42d2cb3bfe2603f63eb9101f2ab0ef4fb86e7224df6ba3e22fea97f46ab90b2b954a2166e9d6bd405c811ebc3bdb6b1667b21b1b7fd493d60204355bd1eb16b69deb07f05b6445164ffb450d765e45e356ae8c3cfd8aa629770bd8c6dc8ee3348e63bc23266af2807eed2bf5be9ca0d74261f61dedb677df2117c51de5925484ff992535c4890c3aa3c3bbcac9a52b0646367eb35452ea9d30baccaab0647ff6a823b24c4804778e38c07145f97f434cd136a205af0d7b2143d46baaa25520bf507ad7ecab1cddea19d67d475a41b8fc934bd8e2534ba8da0aed62f1126f730f6b2d4af798b6d31be384ba293e86ba4e9756c808d7a7ae249da30073ae6e6c635f3a791004e4c97cf315d7e819884ab2cea49c7b77d5ea6a9d2782738e346eb6d9af6e5df4509fe33dd4541dada38283b511e2de6f9270a6b4fe2135d7cf95d2017d7b9c4043d42c573c818f25b13991dbae89960eb5d9bad6cfd9fa33797ee36aa9b9b3e8f1bc9657456642fc877679c571a52dae87a5ec0cbd9bda1f970fd1c787a637fb636cc6026eef20bd88891bf05c08c05a71bd5f1b4c5d2df7a6ed0a274a644e3503bcfa4b1a3146264b44259d938953a323cffa5f3065fe8f1be82c773ddf9e0d04e84efaaba49656047457a0680f7541a70d5873c7230b72ce305693f80a62223c55cf87b8553f411477a7a70bbb2d7b7fe33da89de181549488eb5a4bd9f047690dbdab940889724d3b338a484fcead959197010586c8c7975620855848e2a6302fbb39c341f18ac7e0c2323d3c1f0d2c4fb3c6bcb1a8763dfcffd6e7a4ac14d7e9034fd79a6c1cc16e77833a7b6fee9c9e2a3876e3e64f73b07c64a6ea88bd12ab1873e7ee04aa23c93752dcce981f8cd4ec80ee39d1fb07b20bc3e6d88e046cc7016d2b79d7b58aae7784e3a2250c8f396fca37cac10cd33e2707f84c63249f870c5a6159d38c3d8a43b8b48761d9db2d340623e00dd40a7fd28959b6afbd95a34de88a26239a30f32a8d6d5acc5585e40965c0c98929aa8873f1c69ed3fe4ee1b01c2f92edb09dd5778d12ab5eb40dd9858a546306a4c00b20ca59580431f30d1cfd19e3da0198e05a21fc5088fdc28b5091173eabdf930c8bae6234fbeb8a80ab6e7e4ce00a8093e96b5e3a9b2d4f0a39a89cb45460fed74bf07d35d4d5e047333780e5f02f308c94559ef07c54c3fc86a7504b49db8924cdb2fc4a8053b719913f0f5efd6f9a267e210021615ea77d4840f65b7c3819d9a2e6c03ac2e9be6f11c1d50ce6757e8a681da6c5472174137c008f6151a64a5caff4ff7fe369e0bb91ac4cc6ef7246651ad5908f5b18fe5a5edc345b8d4c0a21f5ed72676f53967184796d65dd954b8444442e8765366382b00b846445bba902bbb234a55630c14be67855e18612b3c579cff987f844bcadfcfc795d89939da7fcc1f161e0617108249fbb9b8a51e8e6a8b354adfb2700ee6c4c631873f6eac45897019b5e8de51086fc35ae94af54ebacf3bdd876a2f8e3f472918abeaf3ad627e176c05dd8821f92f2fedbf669d8a57e57abaab154b91df0d119023a84b71be6df2f8f37e66180a81bafdabd9616bcaf1601caf715e44f1a97c6d82695c5baacd669e2c8928d63b70c82e7e64419dc0cdf22df48ee387135cd727e8224717e6150c253d91f0b7763539bfb7d1214c2e0e96f6f6d80080bf4079033166322c3c9c0c0194c6dc317cd45ca3806b0164273d1bb0a86fc2782f273b23e61e44857472b1cbd8bd2fe65efdc845b1ad06921879e545ab1e56931161e4216ed5a51dacd721c5cab98ccc9085d564ce9c71ee160b148533abc8ea50e4880c97094d0bb6f016a046b90cb4ed7f77386b2a4e91452c5f1cef0e471ef7646c5bfd73f38c8dc739290d6c584a8ff24047e3a5b84b164398dd4756ab107a9e7550480b674f970d7b0b0dca461d51b0ab4f304d265113de230b78cf971b212bf595bb951a3a26b114bfdb581968fbd99e4a6e2a628af260a11050f189dc70b53c1d648e41b65cc8a14f7b529366ca9b6b362adb3b006d400403ea79d1b911fb39ee5d70637e274dc34f0c225999a4b04668ea2b089a1e4cae22277f4ea0c58c4a047711f89b828330c7ef4456b3943c87f99b4df6fb075eef063df00e67a657e3dd502652d1915861d38c392a1fbde63e4328934bf6bb05d017774aaf22aa53cb9e399f4e813cfd218b8a6d02d131e7bad5d5ebb1915009e88d03bce137c595b5cb9425ca6a4c6866b47feb22f5867cc284cd18a05b297d5fa8ad5927281a578818e12d8038173559b6e36e672d6a76582df55689c1cadc585abd7dc93ce227e2227eaee97bda83e7d8e45720af7af486dee0a0d3c4f9628e9c2a0ae648a014f23a2551d7d50919ccb6ede92382fb90a2fb73f218a99bc7834c54b6e47273dc3b9ede765ce96e5038f7724081ec3adcf8d5c7bedc3e6f976a72b05a674b33111dc8d23686b35784eacabb40457a219daac868c8afb96984b13546c2db6a106b64602bd255ed1003741ca83ea7849ce017abae817280d0385f58bb8cb9d95036e96fa95acf7892b70774de538c2c0707074bf93af365be48bdc9fb4ce521f86d1ba0e42a61360401c5b14a239330258deb67789ac7d2d421be01c2d68e44676a9e315a62364d224b431a622a25c7adffcc56a5530ba6332bca9d52ac58c811e282ef27426240b1e18c9f03ca32b6ac59505d5cbd303e9839a0c6d72b661803e7508442d43d518c328b9c087245663af06cd5dfedacfe18a1f7141d99099e1170f0eaf6eb41bfb716d28106aad436231f1b6bec04c760b7916bb1c7196bb3183072a47ad1f8f2ef844", 0x1000}, 0x1006) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:34:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000040049409, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:55 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffb, 0x400) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000140)=""/226) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0ae6d1a0"], 0x0, 0x0, 0x0}) fcntl$dupfd(r0, 0x406, r1) 03:34:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffe1a, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x4b446491eab249df}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000074000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 572.400067][T22715] binder: 22712:22715 ioctl c018620c 200005c0 returned -22 03:34:56 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x6c00000000000000, 0x0}) 03:34:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000007a000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:56 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x6, 0x4200) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000180)={0x0, 0x2, 0x4, &(0x7f0000000140)=0x3f}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x4000) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000080)={0x0, 0x8001}) [ 572.573706][T22843] binder: BC_ATTEMPT_ACQUIRE not supported [ 572.600914][T22843] binder: 22833:22843 ioctl c0306201 200005c0 returned -22 03:34:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x1009}}, 0x20) 03:34:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000f0000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 572.703145][T22890] binder: 22856:22890 ioctl c018620c 200005c0 returned -22 03:34:56 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7400000000000000, 0x0}) 03:34:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 572.927014][T23069] binder: BC_ATTEMPT_ACQUIRE not supported [ 572.932942][T23069] binder: 23067:23069 ioctl c0306201 200005c0 returned -22 03:34:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000fb000000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:56 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x8000004020940d, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r1, 0x9}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00') ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000000c0)={0x4b, "462f9b0bc2317d57488aeea87e1f11fe3294be00cc5934dd4a2fd08875537a8291f3f24e9e528bd9258877ac90fbfd6ae30e08caa68aca67d5f537503674dcbbca4c357497835955757077"}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000580)=""/146) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:56 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'nr0\x00', {0x2, 0x4e24, @broadcast}}) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="f8ffffff"], 0x0, 0x0, 0x0}) 03:34:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:34:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000030000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:56 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x7a00000000000000, 0x0}) 03:34:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0xfffffffffffffe0b, 0x143, {0x0}}, 0xfffffeee) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000001, 0x20100) write$P9_RWALK(r1, &(0x7f0000000040)={0x71, 0x6f, 0x1000, {0x8, [{0x4, 0x1, 0x2}, {0x67, 0x1, 0x1}, {0x4}, {0xd1, 0x4, 0x5}, {0x1, 0x1, 0x7}, {0x0, 0x1, 0x2}, {0x1, 0x1, 0x2}, {0x3, 0x4, 0x6}]}}, 0x71) [ 573.313680][T23291] binder: BC_ATTEMPT_ACQUIRE not supported [ 573.322166][T23299] binder_ioctl_get_node_info_for_ref: 2 callbacks suppressed [ 573.322175][T23299] binder: 23290 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 573.322188][T23299] binder: 23290:23299 ioctl c018620c 200005c0 returned -22 [ 573.351295][T23291] binder: 23289:23291 ioctl c0306201 200005c0 returned -22 03:34:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000050000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 573.440327][ T17] libceph: mon1 [::b]:6789 socket closed (con state CONNECTING) 03:34:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000040)=""/111, &(0x7f00000000c0)=""/102, &(0x7f0000000140)=""/85, 0x2}) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000200)={{0x6, 0x8001}, 0x2}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000280)={r2, 0x6}) 03:34:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000060000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:57 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x57) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x0, 0x7, 0x8, 0x613}, {0x9, 0x80000001, 0x5, 0x8}, {0x8, 0xbd38, 0x7fff, 0x80}]}) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) 03:34:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:34:57 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000080044d76, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x1) getsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000180)={0x826, 0x1975cf3e8074b448, 0x9, 0xf6, 0xc8, 0x9, 0x6}) [ 573.678922][T23634] binder: 23630 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 573.678936][T23634] binder: 23630:23634 ioctl c018620c 200005c0 returned -22 03:34:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x8002) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x8000, 0x20e400) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8080020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x714, 0x2e, 0xc, 0x70bd29, 0x25dfdbfe, {0x1d}, [@nested={0x68, 0x1, [@generic="75d63e4fceb6e8ad9327c8a04dd2c2e8dd99957bd500a531f1b3196966dc3b7928fbc8dacf674dcf907e27f07d2a30acb8e63090d17881cfb2ff3787ee1017955853adb3352a6db8a7944e7fbd7d99bffc6839a52602eb60a3d5acee6bc41997fb19"]}, @typed={0x8, 0x2, @fd=r2}, @nested={0x310, 0x8a, [@generic="2e594d2a12379176f429191de3ce4a268f6065e727ca7b8a493daec140d114f38cd30d16", @generic="ba43541c3af5b8ded6c692e04c9dc6ce8b49343e4ec6b4e9feb12c1ed900fa2754799ada7431a111475fcb51ef023af2c661c096c98ea5a4c29d2c62492f5b58ed7ab27b9c6185b9c6b84932a05c04566d99f0ef00a0f688de5e5106d32f04b844efcb4c5649761e292a243284dfed0b76fab2aa326954dab7df0a4fe27b7cbf57eeda75ccf00ba5bf1632d626c527", @generic="09e13e9cf9213ecedac365c113dc0a62d6a147b20c791b44698dcc963df92d0de42a1f7da189e46e1f2b6f677a439bd2b5b551d068ea05cb8b59bbe28d96c2bdb6406509c2c3656d3074c74f1917e32b4a44815f884d5483238be56e82124676a0cc6093e26a0b34dd8e6e0fbb17fee209cdaac4665ee67626d05eb2047b54845cfe08476504423df7d236bdb509bd45cfdcb15fa5c8be3b2358764d0e8fc07c8eacc49d509989a6db832cb835fbe043a2c65255cc98f63affa8fb22240cf8a9600386acd588a24b2a7aaf0859395b86bb1053d5d1a5fe6457f3a2bc40f41dd3efad470eb72aedae949abee96a2b2265dc3c90860c", @generic="daf179c7f02c00e4a831dae3a7fca28bf6b50c4a3e526522431a83cdd45c97150d29921ca9c070312a76ee1974f457b5d9e562cd3b6febe0264d91fcb81bb2df37f9fbd7b549d41afaa6337c0015a3ebfb1c2b33635c48c2f43e2e7520581bb81be4aaf2bcd1be787aca01fef9474abcbcc9b1e85ae3b61b238e3724ad7a6525fd44af2ea67c97537b3e440e670883b567a71e706ece1d0386e961a5a63b3a400e254a374c1b28010de7716641caf717894d6aaddf8584e996ab9093e77729e90cc2aaf633c0451ef263072369bf24ca4716dd71b2de4f4cc69bf83f8aab4f352c761776d7e58390c509d708bed0562a8230f39ce4956e", @generic="dee81ffe8ab800839cf8db318ce3fca5cb362bce0a6e5a2421d420dea7b26044935f9d6eb4ecbe971211a0abeb561243ba7955b3bae91ce05996d5eeb03c7d80bf65389e1f7be75ec550d8b26a9d8a59b6e5d66ffbbc2f197577960c38ae90c7973f22", @typed={0x8, 0x52, @ipv4=@loopback}]}, @generic="28975f26f57c80a5bdcfc6339519c17c0d78158cb34a8860eee188f09a46430bd9ae91e885516cac2a72424f4c09cd0eadf96cd30f0e238aab06318bd443ecf323680ca96bb4d674634e2f4672458e47fab4954d1ba26ebcedc025fb24b5f73f72fdf3ac07777bd2660e32a24eeb9c286e8250364b9aa6c8e1ec0763ab4bcee25e44cde946076334cd7f952a526c77687dd17c0b7a82f87e012ba511fc6572002f82a9a5663c2c3cd2f4bc752faa4ffb98ce21080917554746e0188807b6e7f068e840bade666da06c4afb32a76766188c1f541712dcbe9d9a8b", @nested={0x1e8, 0x83, [@typed={0xe0, 0x20, @binary="1bdfc2521867d6aea8e166a496f1e0e06baa3f3bc44b228bce6c20a5fb77946d2700af842f74341f0e9d4f7d40f75e0c08dbf102cfca6699ad569c5dcc6917e7d83fc4f46171207f4c436173465c4af33d490fc39c58cf2b3a57ee084ff380127261147b84c5c44f5fc831350da7c03d468d4142fe510ae5545617d076411fb2ed1cecec6319a94b27a978e3a5861d8d30aa8f7606059ef2b91637b00a0aea95ac7489997e0ef76c529a80e8a896383adeddaa47c89494c7eda65d86b08ea8a8f506e8a6ac92b228e7236f9239da6792b1726557f3ec501ff4c6"}, @typed={0x1c, 0x83, @str='/dev/infiniband/rdma_cm\x00'}, @generic="557de37751cd8bf8b03e6ed75d767e9943cf5a812ffaab6f02c8adaf761ade4c36b29e236108de14eca5520b905c86c1fad07d01444b49522473cb48adefb009b99de00ccb915189d827a156623f18901479a5723e2e7c74dfcc6d148f214bb2c55efd2f4ec76af3709ebd1634f01da039f4c4d96dabf5ed118a7c6bcfef721af10e8ced425aa197b4ec9bf973a27a4145f51c98f769a2c082b9540656ceb29b934543379fc0118763bec6ca7ed5e96a15f7511bbb33f290eb9cdda3fc491514c17c651d693cde4ed688d0dd9642e9c2cee1b6e8b02f1adbc781d8913f95e3370384da668282"]}, @generic="e86804dc53b30a2dfb4e32a23588c503bb1ff4b58e3e86f6e8d6b30088dcb01d860d6a48fd7f7e49894a630c7c20f86f19bc3f5368f00192c1d1862741f710e203f72f581b801b79738493dfd6378963e73d212c98669d1741165e19cc53ff3915dcb38967ce167759092a08fe38b8eff1b4c0aa7a51f54eb213316500cd66396e43fd39dcd461580c8d792a660e440f5060102e9bc6cb491a5b68705f8cd558", @typed={0x1c, 0x68, @str='/dev/infiniband/rdma_cm\x00'}]}, 0x714}, 0x1, 0x0, 0x0, 0x80}, 0x44004) [ 573.720731][T23639] binder: 23632:23639 ioctl 80047453 20000000 returned -22 [ 573.734249][T23639] binder: BC_ATTEMPT_ACQUIRE not supported [ 573.743844][T23639] binder: 23632:23639 ioctl c0306201 200005c0 returned -22 03:34:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000070000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:57 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nC\x00@'], 0x0, 0x0, 0x0}) 03:34:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x181000, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') [ 573.900792][T23905] __nla_parse: 18 callbacks suppressed [ 573.900803][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:57 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a6315c0"], 0x0, 0x0, 0x0}) 03:34:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) write$FUSE_LK(r0, &(0x7f00000000c0)={0x28, 0xfffffffffffffff5, 0x7, {{0x8, 0x6, 0x2, r1}}}, 0x28) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0xfffffffffffffffd}}, 0xfffffec8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x18, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 573.975419][T23960] binder: 23958 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 573.975432][T23960] binder: 23958:23960 ioctl c018620c 200005c0 returned -22 03:34:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000a0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 574.081093][T23976] binder: 23966:23976 unknown command -1072340214 [ 574.101010][T23976] binder: 23966:23976 ioctl c0306201 200005c0 returned -22 [ 574.109131][T24047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:57 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x60840, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:34:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000c0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 574.262757][T24234] Unknown ioctl 43780 [ 574.281164][T24234] binder: 24204 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 574.281179][T24234] binder: 24204:24234 ioctl c018620c 200005c0 returned -22 03:34:57 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000080044df9, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:57 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000a924d312c9e82fd9ecebf468a3c38a6d9ffc67e46a155ddb9b02064fe12f841098943b76ef95a5be9a6b65f9ea21354c0293b9f2ec4096bf897c7f552e5ff7fd310df3c76858cc32eaffadc55f3c1b72d6f3b8dc709353e2ad8a062540dbf3197bbfe6797de9cfc4f6e226e15bed5099c5f6bb92be85b69f695b178d5e32783ef181c7f07b67f1e3281a59db038"], 0x0, 0x0, 0x0}) [ 574.312601][T24281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x80) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x10400001c) 03:34:57 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r0}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 574.369900][T24314] binder: 24297:24314 unknown command 0 [ 574.391297][T24314] binder: 24297:24314 ioctl c0306201 200005c0 returned -22 03:34:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000e0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:58 executing program 5: socket$netlink(0x10, 0x3, 0x9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') clone(0x40900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="009ed700e3a8e40b84d55a000000000000000000"], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2e6, 0x2) [ 574.562525][T24488] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:58 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2442, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000080)={0x7}) clone(0xa000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000bb0100ea8145b249"], 0x0, 0x0, 0x0}) 03:34:58 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000002c0)={0xc, 0xffffffffffffff2c, 0x143, {0x0}}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="9d000000e316cdb93dca3ad54c951418e88692de3b3b8e7e1bf6ae6090f0ecff4e24945bd05bf894f6e8f75ec81136291395c5a934432c1070cf2ee71eb91818290b13f730ee82097afaea615bf16cb55dc19bc61c9fb4bab2b149230477a7e024ca9bc96bfac33a43c7365f0bfe5f4179eb13f65583c85563a77b971db8b6ab49902f5d7b33c67157048e7049a07b90b270000000000000000000000000000000"], &(0x7f0000000180)=0xa5) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x4, 0x4, 0x100, 0x6, r2}, &(0x7f0000000200)=0x10) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000580)=""/4096) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000240)={0x1, 0x0, {0x31, 0x1, 0x3, 0x14, 0x5, 0x40, 0x2, 0x83, 0xffffffffffffffff}}) [ 574.608579][T24549] binder: 24537 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 574.608593][T24549] binder: 24537:24549 ioctl c018620c 200005c0 returned -22 03:34:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000c00e0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x3830c0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x68, r4, 0x120, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040010) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:58 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000140)={0xfffffffffffffff7, 0x5, 0x0, [{0x200, 0xfffffffffffffffe, 0x1, 0x4, 0x99, 0x5, 0x8}, {0x4, 0xfffffffffffffffc, 0x1, 0xb72a, 0x80, 0x9, 0x81}, {0x7ff, 0x101, 0x100000000, 0x2, 0xfff, 0x7, 0xffffffff}, {0x5, 0x6, 0x5, 0x2, 0xfffffffffffffffa, 0x2, 0x1}, {0xfffffffffffffffd, 0x4, 0x3, 0x5, 0xbce0, 0x6b, 0x9}]}) [ 574.823087][T24781] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:58 executing program 4: socket$kcm(0x29, 0x7, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x1a, 0x143, {0x0}}, 0x10) [ 574.877247][T24815] binder: 24806 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 574.877261][T24815] binder: 24806:24815 ioctl c018620c 200005c0 returned -22 03:34:58 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000080045002, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000f0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:58 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$lock(r0, 0x0, &(0x7f0000000080)={0x1, 0x2, 0x80000000, 0x3, r1}) [ 575.040711][T24923] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 575.105621][T25003] binder: BC_ATTEMPT_ACQUIRE not supported [ 575.116665][T25003] binder: 24992:25003 ioctl c0306201 200005c0 returned -22 03:34:58 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:34:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:34:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$UHID_INPUT2(r0, &(0x7f0000000080), 0x6) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:58 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3f, 0x103040) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0x1}, 0x2) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a63084071f486059d7e9f99afebe9be9db9b8894ff98f09b965c2954c734ad85c5ec88adb4fe96695bc"], 0x0, 0x0, 0x0}) 03:34:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000200000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 575.266304][T25174] binder: 25171 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 575.266317][T25174] binder: 25171:25174 ioctl c018620c 200005c0 returned -22 03:34:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 575.388397][T25189] binder: BC_ATTEMPT_ACQUIRE not supported [ 575.391654][T25207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:59 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000140)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f00000000c0)}], 0x4}, 0xfff}, {{&(0x7f0000000180)=@l2, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/248, 0xf8}, {&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000480)=""/96, 0x60}, {&(0x7f0000002640)=""/206, 0xce}], 0x5, &(0x7f0000000580)=""/63, 0x3f}, 0x3}, {{&(0x7f0000002740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000027c0)=""/137, 0x89}, {&(0x7f0000002880)=""/208, 0xd0}, {&(0x7f0000002980)=""/32, 0x20}, {&(0x7f00000029c0)=""/18, 0x12}], 0x4, &(0x7f0000002a40)=""/184, 0xb8}, 0x9}, {{&(0x7f0000002b00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002b80)=""/137, 0x89}, {&(0x7f0000002c40)=""/29, 0x1d}], 0x2, &(0x7f0000002cc0)=""/130, 0x82}, 0xfffffffffffff882}, {{&(0x7f0000002d80)=@can, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002e00)=""/143, 0x8f}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/252, 0xfc}], 0x4, &(0x7f0000005000)=""/6, 0x6}, 0xf5c5}, {{&(0x7f0000005040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000005240)=[{&(0x7f00000050c0)=""/84, 0x54}, {&(0x7f0000005140)=""/140, 0x8c}, {&(0x7f0000005200)=""/20, 0x14}], 0x3}, 0x40}], 0x6, 0x0, &(0x7f0000005400)={0x77359400}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005480)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000005540)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005500)={&(0x7f00000054c0)={0x20, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 575.429353][T25189] binder: 25182:25189 ioctl c0306201 200005c0 returned -22 [ 575.434058][T23894] libceph: mon1 [::b]:6789 socket closed (con state CONNECTING) [ 575.449752][T23894] libceph: connect [d::]:6789 error -101 03:34:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000280000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 575.488306][T23894] libceph: mon0 [d::]:6789 connect error 03:34:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x525000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000700)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0xf96c, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x91}}, 0x7, 0x3}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r4, 0x23f1}, &(0x7f0000000180)=0x8) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000640)="a7e2d706b9d96009db37eebe6addf080459f7a30439b2d70997f46841d47d8c5c72580f63ac8c1dd7ec116932c07daafbab6b2096b33c9e3e54ebfbcecd2d77fbde85de2f19e7b0cec827970ac35c427d7c836022fec18c329ea48f82531f1d80be37424d0c08c3bd57b3b8b5c31876721e947509ba0a106fe4e84b1eb752932c8f1a8247266563cbfee93b9807a6b4dca13acb2f9a48431d1dc89a6350c51ee", 0xa0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x9b, 0x8001, 0xaae4, 0x47, r5}, &(0x7f00000002c0)=0x10) [ 575.562984][T25472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 575.583817][T25485] binder: 25467 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 575.583830][T25485] binder: 25467:25485 ioctl c018620c 200005c0 returned -22 03:34:59 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000080045005, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0xffffffffffffff83, 0x143, {0x0}}, 0x10) 03:34:59 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x80, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x100) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='yam0\x00') 03:34:59 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r2 = request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='/dev/binder#\x00', 0xfffffffffffffffa) signalfd(r1, &(0x7f0000000140)={0xfffffffffffffc41}, 0x8) keyctl$invalidate(0x15, r2) 03:34:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000003f0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 575.747075][T25619] binder: BC_ATTEMPT_ACQUIRE not supported [ 575.752962][T25619] binder: 25617:25619 ioctl c0306201 200005c0 returned -22 03:34:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x22000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x2, @loopback, 0x9}}, [0x8020000000, 0x8, 0xff, 0x8eb, 0xffffffffbeeaab44, 0x1, 0x0, 0x1, 0x2, 0x8, 0x2a60, 0x4, 0x7, 0x2, 0x7]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0x0, 0xffffffff, 0x4c, 0x8, 0x400}, &(0x7f00000001c0)=0x14) [ 575.827688][T25699] binder: 25660 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 575.827701][T25699] binder: 25660:25699 ioctl c018620c 200005c0 returned -22 [ 575.855599][T25692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0xfffffffffffffe40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="9f67886c323760b48f9d39292a977831", 0xffffffffffffffff}, {0xa, 0x0, 0x28, @mcast1, 0x200000000000000}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:34:59 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x4000) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0xfffffffffffffffe, 0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000710978d9b3b224c3a89372e03cf6b99c805e81b612dc433fb6ed621bc6b88f9412d8a30a7fb2f3e821da026fe8129157fce55010097a92656e14dc75731a0302fe93d136dc81b1d6020a94c3a92e4cbd7feb2f5fc9ad7fecd2799a57777de5b66589a9674a3cd631b674115a1c22f17efb50f0193d78d51e83b822a6eebbf5809573a2fce6fe1ac3a3982d088f8c55eebf4b83ce81bc220de7f7f6efbc09fac23770533716515a7c1afde1fa6d9be88724cb743d2a976b0ed2e246b80efe95c9ebe09de7969da58241d54ab26ea9a1e4c6f830dde4d"], 0x0, 0x0, 0x0}) 03:34:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000480000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:59 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:34:59 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x4800) [ 576.050744][T25942] binder: 25940:25942 unknown command 0 [ 576.052114][T25953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 576.069779][T25942] binder: 25940:25942 ioctl c0306201 200005c0 returned -22 03:34:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000004c0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 576.160424][T25963] binder: 25958 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 576.160438][T25963] binder: 25958:25963 ioctl c018620c 200005c0 returned -22 03:34:59 executing program 1: clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = getpgrp(0x0) ptrace$cont(0x3f, r1, 0x22336e14, 0x9) 03:34:59 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000080045006, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:34:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$setopts(0x4206, r1, 0x9, 0x40) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:34:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000065580000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:59 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = dup2(r0, r0) getsockopt$netlink(r1, 0x10e, 0x7, &(0x7f0000000000)=""/94, &(0x7f0000000080)=0x5e) 03:34:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x800, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xffffffffffffffff, 0x2000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@loopback, @in6=@remote}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000180)=0xe8) [ 576.379746][T26183] binder: BC_ATTEMPT_ACQUIRE not supported [ 576.380536][T26186] binder: 26179:26186 ioctl c018620c 200005c0 returned -22 [ 576.396680][T23894] libceph: connect [d::]:6789 error -101 [ 576.402470][T23894] libceph: mon0 [d::]:6789 connect error [ 576.406360][T26183] binder: 26182:26183 ioctl c0306201 200005c0 returned -22 03:35:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) fsetxattr$security_evm(r2, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "e30207ec2058451497928b8ca8e2eb0d54cdb786"}, 0x15, 0x2) r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x6, 0x400800) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000180)=""/67) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000600000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:00 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) poll(&(0x7f0000000140)=[{r0, 0x4}, {r0, 0x8000}, {r0, 0x20}, {r0, 0x20}, {r0, 0x10}], 0x5, 0x3) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000040)={0x27}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x800, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000000c0)={0x1, 0x100000000}, 0x2) 03:35:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000080)={{0xffffffffffffffff, 0x1, 0x22055a00, 0x3, 0x2}, 0x0, 0x3, 0x836}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 03:35:00 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20080, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={0x0, 0x5, 0x7, 0x80, &(0x7f0000ffd000/0x1000)=nil, 0x401}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dhcpd_initrc_exec_t:s0\x00', 0x29, 0x1) 03:35:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000058650000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 576.878164][T26509] binder: BC_ATTEMPT_ACQUIRE not supported [ 576.902353][T26509] binder: 26507:26509 ioctl c0306201 200005c0 returned -22 [ 576.914322][T26512] binder: 26504:26512 ioctl c018620c 200005c0 returned -22 03:35:00 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000080045007, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000680000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x6a) 03:35:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={r1}) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={r2}) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000011f7db8fe6e9ba8a000006006b00"], 0x0, 0x0, 0x0}) 03:35:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x60) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20400002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x74, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr="69ff1e37473e952ba2e2144f94793dc6"}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xcfb9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffffffffbff}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x7, 0x0, 0x6, 0x9]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x800, 0x1, 0x8, 0x4]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x11) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x29f, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:00 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a630840278086d42b620a0b2d9ffc3dbe2c2d14ed4bc99d4bb47c4a28892e72bc4e9bcb6d0b1135486b213127821d53c95d2804bf9f2cca1a0279fddb64a8fd404fc7ede6a54b0ae3307a747560ce0a54896448110182905b5d4a0818aa098230adb56621555152dcac8b18e56094662f82137823c26f090f2bf7924a20e5623f60b33ce7250bc267375a2e29cf6078dddaa41ec7acb30e5a277b"], 0xffffffffffffffee, 0x0, 0x0}) 03:35:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000006c0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) signalfd4(r0, &(0x7f0000000000)={0x81}, 0x8, 0x80800) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) sched_setparam(r1, &(0x7f00000000c0)=0x9) [ 577.220743][T26849] binder: 26847:26849 unknown command 285212672 [ 577.246334][T26849] binder: 26847:26849 ioctl c0306201 200005c0 returned -22 03:35:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000740000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 577.278384][T26853] binder: 26851:26853 ioctl c018620c 200005c0 returned -22 03:35:00 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_destroy(r1) 03:35:00 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2000, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2400, 0x408000) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x2, "4de5f7e3d62dac46ebfddfee53c6f17b736ef0243763c49bc4a018c4759b57dd", 0x1, 0x100, 0x4, 0x0, 0x1}) 03:35:01 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x5a, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000dc2e4b649abe584028aa0b2b368ff4b777c1a79627050ee5c07ae27d89a5be0b7d80d5d11373ea31689e8746898800e130a71956e7895d86c645ead3fd2dcdaa09200ee20c08114b08e86a6f9a05715cd3520c884d61"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x121000) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000300)={0x8, 0x0, 0x81, 0x10000}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e23, 0x1463, @loopback, 0xfff}}, [0x5, 0x4, 0x8000, 0x7, 0x9, 0x9, 0x8, 0x200000000000, 0x100000001, 0x6, 0x8000, 0x7f3, 0x5, 0xfffffffffffffff9, 0xd8d3]}, &(0x7f0000000240)=0x100) [ 577.426857][T31865] libceph: connect [d::]:6789 error -101 [ 577.432700][T31865] libceph: mon0 [d::]:6789 connect error [ 577.489553][T27178] binder: 27170:27178 ioctl c018620c 200005c0 returned -22 03:35:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000007a0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:01 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x8000008004500b, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000000c0)={0x12, 0x328, 0xfa00, {0x0, r1, r0}}, 0x392) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x800, 0x222000) sendto$isdn(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000ff7f000045a71e0e8b000400004c30ad99eda33e54e7f415"], 0x1c, 0x41, &(0x7f0000000140)={0x22, 0x2, 0x6, 0x2, 0x7982}, 0x6) [ 577.568647][T27186] binder: 27181:27186 unknown command 0 [ 577.580202][T27186] binder: 27181:27186 ioctl c0306201 20000340 returned -22 03:35:01 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:35:01 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x100000001, 0x4217e792, 0x1f, 0x6, 0xfffffffffffffffa, 0xdb3b}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000810000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0xfffffe68) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f00000000c0)=0xfffffffffffffffd) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x8000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) [ 577.788658][T27509] binder: 27483:27509 ioctl c018620c 200005c0 returned -22 03:35:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000ec00000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:01 executing program 1: clone(0x2005, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\nc\b@'], 0xb7, 0x0, 0x0}) 03:35:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000f00000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000580)=""/4096, &(0x7f0000000040)=0x1000) [ 578.016939][T27648] binder: 27638:27648 ioctl c018620c 200005c0 returned -22 03:35:01 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x17, 0x0, 0x0}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x22800, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x3, 0x1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000001c0)={{0x7fff, 0xfffffffffffffff8}, 'port0\x00', 0x8, 0x10004, 0x1, 0x8, 0x1000, 0x5, 0x80000000, 0x0, 0x4, 0x7fffffff}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x3) accept4(r1, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80, 0x800) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000140)=""/75) 03:35:01 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x8000008004500f, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:01 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000fb0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) flistxattr(r0, &(0x7f0000000000)=""/12, 0xc) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 578.220689][T27754] binder: BC_ATTEMPT_ACQUIRE not supported [ 578.231225][T27757] binder: 27751:27757 ioctl c018620c 200005c0 returned -22 [ 578.237940][T27754] binder: 27752:27754 ioctl c0306201 200005c0 returned -22 [ 578.277607][T27757] QAT: Invalid ioctl [ 578.295051][T27757] QAT: Invalid ioctl 03:35:01 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2102, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x5) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 578.393528][T23889] libceph: mon1 [::b]:6789 socket closed (con state CONNECTING) [ 578.409610][T27976] QAT: Invalid ioctl [ 578.431435][T27976] QAT: Invalid ioctl 03:35:02 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ptrace(0x11, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 03:35:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000400300421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:02 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0e000000"], 0x0, 0x0, 0x0}) 03:35:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x400, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1c4f, 0x101202) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000005000000", @ANYRES32=r3, @ANYBLOB="000000000140000000008000f88e030100", @ANYRES32=r3, @ANYBLOB="0000000000000000010000000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000010000000000000001000000", @ANYRES32=r3, @ANYBLOB="000000000000010100000000002000f1ffffffff", @ANYRES32=r3, @ANYBLOB="0000000000400000000000000080000000000000"]) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000100)={0x0, 0x2, 0x4, &(0x7f00000000c0)=0x6}) 03:35:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x400000) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) 03:35:02 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000080045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) [ 578.841232][T28093] binder: BC_ATTEMPT_ACQUIRE not supported 03:35:02 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100, 0x4000) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:35:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000034000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 578.882468][T28089] binder_ioctl_get_node_info_for_ref: 7 callbacks suppressed [ 578.882476][T28089] binder: 28085 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 578.882487][T28089] binder: 28085:28089 ioctl c018620c 200005c0 returned -22 [ 578.893208][T28093] binder: 28086:28093 ioctl c0306201 200005c0 returned -22 03:35:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x100, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0x990000, 0x0, 0x1, [], &(0x7f0000000100)={0x9b0951, 0xffffffffffffffc1, [], @string=&(0x7f00000000c0)=0x8}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 578.965158][T28212] __nla_parse: 13 callbacks suppressed [ 578.965168][T28212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:02 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:35:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000a0008000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x666, 0x143, {0x0}}, 0xfffffffffffffee6) 03:35:02 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfffffffffffffffa, 0x80000) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0ae331ce50400dd504359719b21528c2cdfd5f4105a99db5c30da0856b636618dfd78ecd49242ef8528fd239cc661f91f7f44954b52c91bb0000000000"], 0x0, 0x0, 0x0}) [ 579.162743][T28460] binder: 28438 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 579.162756][T28460] binder: 28438:28460 ioctl c018620c 200005c0 returned -22 03:35:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000), 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:35:02 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10000) timerfd_gettime(r0, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000100)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r2, r1}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 579.241270][T28547] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:02 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008894}, 0x40040) r2 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x8, 0x2) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 579.309786][T28638] binder: 28606:28638 unknown command -835591414 [ 579.337325][T28638] binder: 28606:28638 ioctl c0306201 200005c0 returned -22 03:35:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000fffff000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 579.411336][T28679] binder: 28675 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 579.411350][T28679] binder: 28675:28679 ioctl c018620c 200001c0 returned -22 03:35:03 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x80000080045017, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000500)="54f7720cae70404f5897a237b1bac8ae1cb37689eb394d3ce8aa999c54615172d42822abd96b5a4c2000915cf8cb3750fa517de33890ca08ba94e3077f9ea6eb93647e31f453d493a6f2acb2bc6e1051bffb6e4ff33ad0e9ae04b107def87853b97d838a7a0f1427078521006cccab90d5d323450e189d74e2028bca0f954b6e4c3594f2c3fe168fb58596700c0fb600612256cd11b6fb91a62c11806a73820ecf0ff6af51484875591956f68f428bb62720a58301ac4adaa9485b6f53f523bedcf8779ef0d56452e4a88246532ad9bb0b345bb312b0e60617e0", 0xda}, {&(0x7f0000000240)="1d0e7f22cb5953ab184e60c560560149002d7dfe52770ff2f9984fe05ebea1dec10dddff51ad36c9ddc59bb2e75071bc2ac8b48f861548be06a3ce24784a0aab0ef359d378a4771e1c4665e211a64ee7cbe65211d980eab8bc23f4f2be584763ca7da9b547a28abf3047a119d44e2c832bcf66819b0300ef9709e9b1558781", 0x7f}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000400)="5d108635fa99dec64cde3793bc53c2ab96785bc51158d457318cdcb3caf8887a5009d7cc766f", 0x26}], 0x4, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="d95e0e56462664a79729344af329fc76390378f6ea1b7c739ea55470f01d6466d126c638d454a690ac2e8b74f26e506bc8079c77a669c66879088e294e764c5985a7ad808b12638f0fb5321ed6b257338dd520b367735d3891255bf10195310d17a628fcb44a7685019f0457c80de3b799a69e57b507d2b172644c500cdbf7b6d6101aba487cac31bf96089e81bda2b6151dae95d400d7a53d25119cecb0bad8dee881e9a1983d85a231a5890aa844b24754d2304d627f4e2f61812d212c073b84e96fcb50bd82370ce87131", 0xcc, 0xfffffffffffffffa) r2 = request_key(&(0x7f0000000300)='dn^_resolver\x00\xf5Wz\xc00>cb\xbb\x8d\xf8x7\x8fIV\x88\x99\x15k\x1eM\xda\xbeL\xe9\xc7\xb8\xbfN\xad\xb4C(\xba\xe7=\x00n#\x94\"f?Z\xd3m\x11\xe8)\x93\xb3t\x98\xfa\xbb\xdc\xf0D\xb6\xe1\x9e\xd5/\xb2\x94:mb\x89\xa6\x97x\x85\x9a,\x00,\xc62$\xe2\xff\x11\xbf\xe9\xb3o\xcc\x14hj\xeed\xa1\x9f\xe1}w\xe8b\x8e\xb3\xe8\x8f\x9e\x99\x1d-\xf5Z\x9d\xd1\xd0\xc7\x02\x1c', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000002c0)='\\system!,vboxnet1#\x00', 0xfffffffffffffffa) keyctl$search(0xa, r1, &(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x2}, r2) 03:35:03 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x80000, 0x80) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000001c0)='veth1\x00') ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000340)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000180)={0x10000001}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4c2040, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0xe1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a6308404145639540307b26ae7089c63cb1b0418819421a8c6d295f9e87eb4145b9b5ee5809e5d4e5d8bb7fbbd570856f79c139ae2940f717a6abfc7f1a6f5b777625cd9ddb612f779f93ae9f5c37f8f425cdb6e208ce7859c6603acd80771b3bf94f94fb49910bfdf4ddebc681a345cf1dbf2c285bbb42c047926ebbcda7969c3b5b5bc117b2785f797e6ceca9647ed9fbf7be94114d855eafa7f0070dfe02bc52758861e3122f3f17fc6494a1346c25e253fa9d2406f9b6276893ecd98cb95e700b7b4050aca2b4c5056dea12cc44f405f11d471525ca522806248912389c2f"], 0x0, 0x0, 0x0}) [ 579.587220][T28919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:03 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:35:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x401, 0x800) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000000c0)=ANY=[@ANYBLOB="080000000000000000000000000000000000000000000000000000000000000080000000"]) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), r2}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000001421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x60) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) [ 579.742828][T28974] binder: BC_ATTEMPT_ACQUIRE not supported [ 579.759200][T28978] binder: 28976 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 579.759213][T28978] binder: 28976:28978 ioctl c018620c 200005c0 returned -22 [ 579.776801][T28974] binder: 28972:28974 ioctl c0306201 200005c0 returned -22 [ 579.857889][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:03 executing program 5: clone(0x408, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) 03:35:03 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xffffffffffffff44, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000002421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:03 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f00000000c0)=0x10000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r2, r1}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:03 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:03 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/packet\x00') getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000500)=0x4) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f00000002c0)={'veth0_to_hsr\x00', 0xfffffffffffffe00, 0xac8a}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001600)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x101, &(0x7f0000000080)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000101}, 0xffffffffffffff13, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x4000000) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x440) setsockopt$inet6_buf(r2, 0x29, 0xfa, &(0x7f0000000580)="0026a77163a4778754f5058ba506f21ba2a9a6068c81f997cec678754ad76478c169e7a2443822297d325b00cce4e16813eb63fed4f5f06b32bc9fa3aa6d3f811776043e949471e86e2eb42eacb0a1b24a7e2f460881b61c7f711bfb40742ea9666d2a6fc17551b2e721d560afb1c955d3188aa4e56e067b798d031e882ea7ea8ef509a73daa3e194d5c1ea5e329574bab544cf91ebca71065574a1e57d22167f3d62230b1ebb60029eaba1afc76c505a6128db8c42c6be2e32b255ea6f301ebf149543c123629f5133792e04ff88f2df0f7a98929319028ef7645efb300ff68dae572e868b7703ea883a1db4b08aa6a875cdd587ef1338be6f2f5559926f4dae886083d0d0a5b156e350e8b3f7a1f466699adda88a97370778bc9b5dca13ad0616b4fbc1eb0905f9117e25983b915ed2c27ab17661527e1589dccd3745b619361b3fe7030998d776d704081a60606e546cf02eb3874165312c8fcedb7a376b0043858e9bed87f26e92d536fb3f216094723b62fc6e7d362391d1b6f3e76fda88c66d4de6690057fd73e9e5bf2e05f34c741bf022fb8fb47f119d38dec26117939ca686a15a21de151d2d9c98856eb4789e7279e63515813078982a29d9025a2d0e3e71ea124e2cb848b20e434f80d67e337c11b3c16d8f5a72b3ff78c4045353951e987a1218c064656f32797c9bd145619cc04b9fae64fea863bf2406e15ef4bddaf897156c5eabe442a82a50d4cdc5fd73e031b965ff330e2f6bd5f45ce0f238acfa57d74babcd0924e21f5f6485638e256c14a8e5632e79b12df8682381a3663f6a0c7c101f1c6ff8b2262946d081cf87f2785dd4e1de7635689b5e3c5070ced416690affb6b481754a2f4aabf1859ab3fe56bb7704dec61a39d46186bd7722ec5fb67e9105095941de8531fde1093ef64a9d357fc373b77e249c9326176aacb805497a1a06a75a5487f3d8dd85cf7691071ecccbf9c536cce1a3db7ff52b5b356e914b5044035dde9325467e6f8ba5b88cc8da8a05b5988aaa912dbe29c5ceddfffc67a302551c5d02321e48bf089854b07434932f15e91744bf9b931b0ea794a7def6ffa103aa5a137680673bb02d99574b5dd39a916e4a3d175a6f93e25b3135039458b722ac2c346b5ee73be07cd13f8d70e9caa3315810122f45f223babcabe79bbccffb689775de831edc07614bb7492fa4de7e4bc542548566e558f24358d31e0f2bc53f6ee9503d5292ba0bac8c90f031f73f612cc30432f7b2084a8675d96fb160265cebb26575b0598ff1e462b118fca69ee61689243b5b340c39260944361ce69a77cf98950d018a846adb7b8c8adf4b23272930023b33ddd945053ce4a6bf2a8caa6db810d53c046756ce31dd0e7173e5d504c28a8510f735e8f3aef5d9227789af8e49c89720faade1cf00fb8c1c1223e2452bc49325dc5baf2f060aa602b83c3375bfda2e501ba971218adcf47830199bc483fc88da9449feaf7379897a8be3536c8d7ca830edd76e7ce4f67123a329d6aba4f86fa23ac10f054b5196315e300273c19cbe009b63b07af83b95f0ab685f17bb8ccfd20389d269d2ccb57e50c2c0f3efa339533ce2ccd28502390d3239e49b44ddbd1e54db56f5f453dc9c0f0054534c2278c85b303db6ab2ebec2efe9e77ae41a98f763cfbf5be0eed128191687a83ca26b0bdcf3843b9e572917fb6ccfe05af6c15d7249687134768c4183dca871488aae3cc9788d435be86bbb9df0a6e442299792a33753b674b06e038acd27a39a0488762a363c2380e4759c962ef7c41aeceebe8ba765e7087b0582b37c887a48f4a228e542ecb64dc2d69fd7ff0915298b5a137b66eeefb2c62d488b8df82ee9ca6ae8563a028b785df39f20246dfdfdbb3ad1f6bca55e695ca97378bf76e8ddb3312eaad325bf897fe4c547374757336d2fc90f42f85859ef3b36f445c2729e3bf40b92311329a52090501fbf1cfe0b4a02cd45881401d6295af02fee56190693b4e90ec1ac9673754da73f305874756b787aec05ecd9ae36db7ebe48715d59672964fec50b76a50083bfa654ebd9fcc2195064cf46ed1eac6654dd2adba930984964177de5e51224a87370f4f96b858b725035040ef31ccba9cbd1faec5959b7e9f112951bc6679dad14a260e3a0c7c55fbc72635c3577c6f15c271dfe905927ee6942f672d163834a40b5ea95c87c84388ff23a48299ae482012c826cb1360ec75e8ac22520bcc147912e5092bab97eeb522e3f3db17141706b28cfa2a7b694dc357fd87bb659e568cba76b0492ad70e90d7a5a022bca3f829cf18abcf72151cd4b72807473254e676b50901a466f1706884590d096a33eab2c33631b9a7aa37af094a3f50908574d0e1a069a0b117645ffba1dd6e7e819b69bd741b42a11236c03deac80d515343786e71d602cea19493ceec13eee335a8ed4726748db7d3625463331a1cbef57b9a88ec1c61086edb69e3f7e63ea48fec0b783d548359dfe43cd9072caaa11cb9e89a5b965d073e2bf4dc0c1f10ca548b5b62b3a19205332d12cb006aeea9c90deecc8e70e49872a7550b2ab67a747efc4ce1d5e5bde431ab0f2088f7da411f6902ff1d366aeeadd916a85de78a9d11ad4c26e46042cbf31e505985a62ce95f6de169a1093cd84a55357dcd5bf84215f782c383fd55d975fa9de5067004ffea0cf6a8bfaafd6828b7538a2616037494296e2e948bf0400ca0f6cc2581c48e4a6cddb50a1511945a57571ad4a025e55a1dab5cd80ef67ce5294f0c2dfdd5067ccdf0dc32e98e79740fc7b46c6f4dac4506b2bcca98ffe68de14db6e01fad40ed3ba9e838f5554158ff36ade573387e54a47e986d4eaccb43bd6b56fec04e76f86960ff7dc49bda106692fd37d4c68e0fd4a4cd22716bf479d47be12cc38960d28f86c0b170415e27c9335fbf6e3bd86f2e5ac1794903ee1c08e9cce989089dbf06345c316c9d169c57af60607728a6fbbc2621ade2cb066d4cea40fa1a4e0378e3f773341f6dbf21efe6768e49fea858742f53488a0fce5731e964e5fa723176b903e06cdf841e1dfef9c189880ab2470a1fbece8bbd5d549d9f00ac7921cf880e3b5437c037872ec2c2d9bf0099d9a6511f6aaf34907be21eaf55a18f05c43ce7d7210c2239ce8a7500f4ac50ba78ffa69d0887015ca39548c6efbcb3a2a293bbbcbbbe6efff157f666a7c4ea8ae02ba0fedf1af29d0079070980ec3503bdf225851e010effc32fa3b80d336d3ed0116127d41ac065ad10d1a47cc6452619d1874216a4243f0d880da368f41ba7be09c0d7ac353e2814c17c2d6779dc2d315309b747ddda5172c986ece0b3282d9789ca7e71b0b4c57dfad930b68c0b19455fe45782b70be90a316129f75f0ae4a38fd346aa14c625a0ec34bae6e17cf2c8b54741bec32d228275ac3c141b606ff12dc39bd8c62ac4b6ca2d1e82b863c92a1c49093cf5397a6a376b46fde83616337cd4341fb47a8c2aa57f1b4880eceaf84687bac173eb0ddad0179b7cb09ad21abcbeaa5b1e62fbafc8275b0665b14fa485f54e5db28569845be9d2ed06bf2737cb02ea5047aeaf0c914dc28c288979d44d085508f42b87f757d022de20121b5eda9d815e2df88ae4ed7fafe60a0974ba9d013e59bea93ad9bcd78610ec14f26b1f84440dafa30bcceed6c48488a25b95fab2a910a28a808014f72912dab25b82d6d1a225958aa5952f35ddeaa0019e2601eacafc364c8ed6e48dd6688b5399291904b179f323ff63dfac4355bbe96bb7331594f71b55254d6a20937a551d5561f71008ba08c61c3f8a5f79259e23fd2ef8621fcc456440600d798d7ffae109c5e6436ab71fc13fe7b721ab4117363a8e167448693f2239ad198bf6a9917e94426d76da034c83ba640bba7c817723cb48d4bf9f163aa38018adc2e9e48f6f6497aea5b41de870e2be22fae97f66288eb045075622117e35dece5427828cc2621f256c72053d85a769150725c36e25d75745b2bf8e8067c6145aed735c36c48173603b0ac55b1b4dcf2183c742c48fb78527db40027cae9562c2557d886f12838736f892c3033f8af9881e771648de6f4da75cf0a433954dd538e8421058ded1b08828bee5bd9bf99fa7880a9dadb16c6ab05c1a559e323188708215387063a874770bc1ca354369e6c998870d57834ea86bae57e6955938e5c6773f2c4ecbbb87f976d3d0810ae13b393e301a8a132769a93ec522c209cb7049e0190b4bfbdac9625d1f5c3065c326e1d472d7268346498aae359d316f05301148ce98e2e614f90c6f986641ff594a45cc44a247589980e0b8e1a95663db192969f7d1b67d5b0b847a270b9c9da9db5dea9ca76e76baa9a7e02de6f14b5f7781b184d65d40409316f00dddf07c168e3cb5f4d80e86690769af98bd4bc4a0a8b9f471cd01ecc68287122c88b12cba26af85e1a612e8e7d08f8c0186ef8b37e2caaafc9829643d4aeb28ba1e9cbd7a3a54e8ce4d19cc996fb1c6817d8ef775b6772d99f7b19f1d8beff46acaf9a9ff205e34079ddaccf9a227201b6454b5c47eddf3ab62bfb205257a0dd3ed703bef681ba362df2eecf2bc71c473091c10e1c6c810a6bb6d233c416d5ab7b846c26caa1d8c36d5f4b6b20ddef7543ab256b22d47754fc8f47be53e5a93693d644dae908f8b6d6cbcdf150c5b2c3bddca815f67c4d34b3e83511e80c34b70016a954a923bd5aa0e08f00c7280cde3662dd64ac36653942d2602b9281f82e47969abaf6b31fe33fbfa29891453b60648807194c450259a8348721d17ac1ecc812d2d82c2a2a273d7f6909c0c8add343d06e60a897bd6086e6874080c3d02923f0c96f44ce9f06e6bbe00bb82fcaab73b8562d2d428c84505129b40faabbc8cdd98dbc7973a3e705d86682544672ff7e7798e0cc275dcbd76af5d542f9bb9e41fa3dfaf4d9c5509f3402f00ad816bb10682bd1127515eb4babd009c7ae530a931a516af884ed2ad546dda8eed9e88b056eb774add2d32c5a7389d2a2a18a0c18a7d1c3c7bc5ce83a64b432450ecb179fe969d337507ceb7bc3877670f832efcbde8acbd99a6f4eed552abbbc7be896e320a3606947355e1f50ae2b96ecf9f2914cbf0fc2c97d92bbab06d4c44d7542015e86fdcc1b3009615e20e229684eb1c4847dabcda9095c7e2dce2f2fed08ec723e40847ac2c9a742954519b2187b1e9d1dab0c26774177e76e5231dafed6be8848a6b0e76fe6ec6ccabfe94d2730988a7b79cf10e8a1da1538b7ba2aaaa4379d7a13884808cab0c714a4debac5794b7a81333b5bb475783cf5f972ee3bc9c40d4aadac179f798ed32577e79ebd63c894ec3fcf866101fabce8757704e4167ae37291bcd26b6e8c95ef48b657de10852a900ea97a91234d0a074323f514b3404163f429a1a6f7031425851699e5ebf9fe93a85064e1969ade6a82b34d9d3f73819cdc97385aa4db05cf98fec28217642b4f577e02421a92ad6acbdf0986624d9dc6a7d1e43a1e6a11f3696aba6d74091846397ff6b4c216d53f5f81b7dc2c0c9e7caa74180aedcd34b33fa63b649408f32b92f9b8381d6a97c1960c41bee6b1716a8257328bb0844a4799f4c3d31d1e552303ad740743269c0f53513e789795209194c61423424a0eac5a9934fc877c5a70524fb2723ff830202e65a758a8bd1be8f1dbd30924fc5ec4468a46be54edc4c6b9f27ab696604ab33130175968d770eb195d1212e5525be69c7521b0acd444613f0b30765264550c719d0cdadd8efcb380cac0c86cfab80fd", 0x1000) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffa, 0x0) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f00000015c0)={0x0, 0x0, 0x7f, [], &(0x7f0000001580)=0x3}) [ 580.151681][T29338] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000003421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:03 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={r1}) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x800) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)=0xf93) 03:35:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r1}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000580)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x23}, 0x8}}}, 0x90) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x400) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xb3, 0x200000) getsockname$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) [ 580.401187][T29635] binder: BC_ATTEMPT_ACQUIRE not supported [ 580.420770][T29636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 580.435753][T29635] binder: 29633:29635 ioctl c0306201 200005c0 returned -22 03:35:04 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 580.476794][T30288] libceph: mon1 [::b]:6789 socket closed (con state CONNECTING) [ 580.485494][T29642] Unknown ioctl 35298 [ 580.503299][T29644] binder: 29640 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 580.503312][T29644] binder: 29640:29644 ioctl c018620c 20000080 returned -22 03:35:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000004421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) io_setup(0x9, &(0x7f0000000000)) r1 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000140)={0x91ec}) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x4000000000000000, 0x8000, 0x9, 0x7ff, 0x0, 0xf0ee, 0x0, 0x5, 0x2, 0x2, 0xcda, 0x10001, 0x1, 0xffffffff, 0x9, 0x1d3800000, 0xfffffffffffffffe, 0xffffffffffffff7f, 0x7f, 0x2d, 0x1, 0x1, 0x3, 0x17387066, 0xfffffffffffffff8, 0xabb, 0x2, 0x6, 0x2, 0x0, 0x2a0, 0x80000001, 0xffffffffffffff0c, 0x6, 0x3, 0x4, 0x0, 0xd46, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0xfffffffffffffffc, 0x100000001, 0xa, 0x6, 0x0, 0x8}, r1, 0x5, r2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$packet(r2, &(0x7f0000000100)={0x11, 0x1b, r3, 0x1, 0x0, 0x6, @random="67e63dccf945"}, 0x14) r4 = dup2(r0, r0) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000040)={0x4, 0x8000, 0xfffffffffffffffd, 0x0, 0x8}) prctl$PR_GET_SECCOMP(0x15) [ 580.617231][T29752] binder: BC_ATTEMPT_ACQUIRE not supported [ 580.629654][T29752] binder: 29654:29752 ioctl c0306201 200005c0 returned -22 03:35:04 executing program 5: clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000066899b2634c7543ba2763a7a21949ebe1a8e90e255f28f9b992ed950d4800034620242b3b26d35047f815f0d07cfff6cf6f2ef21582e"], 0x0, 0x0, 0x0}) 03:35:04 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r0}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r0}}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000000c0)=0x9, 0x4) [ 580.682329][T29867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:04 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000800c5012, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000005421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:04 executing program 1: clone(0x50000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x100) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @host}, 0x10) write$cgroup_type(r1, &(0x7f0000000300)='threaded\x00', 0x9) fremovexattr(r0, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r2 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x28400, 0x8) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000240)={0x0, 0x1}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0) 03:35:04 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x10000) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$FICLONE(r0, 0x40049409, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 580.858123][T29981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000006421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 580.919389][T30006] binder: 30003:30006 unknown command 1074279431 03:35:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x9, 0xfaa8}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x4, {0x7, 0x6, 0x7, 0x40800000000}}) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 580.979472][T30006] binder: 30003:30006 ioctl c0306201 200005c0 returned -22 [ 580.992828][T30108] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = socket(0x10, 0xe, 0x40) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc00800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r3, 0x303, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0x30}}, 0x4000011) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:04 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a63084017ad2a981daebc2603fbf6611291b5841aeeb96510237df8d3185bd7f17c5577ef0283257956df25c3c4d4caf2f6bfc1512ef9f3cb2e22c2b06e3faa1056d2ae30224c90b56d5c002f3961aeabaac1a06be9003289bc511b663605780e6976ee9613c609f91e2ff0e8fcad7de3ec7ae280f60200002167d77101b0a6b9a3b15b7c4c8193ee00d2ed78fccaea956d58bc237157322fec1acf6d8bba7714836bc84635cd8c3d4b13fff6f5eb4da282b0a2b46acaeb623300c79a1c3132beecdc0613595696fcbf491eeca99b1475f1d5d269456c7634651b9aaefd104d11221186a55ade0cb2afb1e391ee28c702541de876b0a4808175b9052f3349248b228677e2f013ee5cca727c246da0c22d3ec8445e93754a2424fe768740f9bb23a6ecc3a97cc36fa6eeb99f0c89df1bd4eafba773499dec3dfac78adc4cc199b6ad69f0ccd645124f7786e9148ded33b3be78541f8c47351eec4e180f9ab402b96dde1c5a8049f7dba5b4aa785ffb"], 0x0, 0x0, 0x0}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x5}, 0x1) 03:35:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000007421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:04 executing program 1: clone(0x4000003102042002, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x20c, 0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x100) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={@null=' \x00', 0x7, 'hsr0\x00'}) ioctl$TIOCCONS(r1, 0x541d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000640)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r2, 0x1}}, 0x18) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x61, 0x10000) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000080)={0x2, 0x80000001}, 0x2) 03:35:04 executing program 4: utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x273, 0x400}) r0 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x200) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x690000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r2, 0x3}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f0000000040)) ioctl$PPPIOCDISCONN(r1, 0x7439) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 581.171444][T30309] binder: 30305 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 581.171456][T30309] binder: 30305:30309 ioctl c018620c 200005c0 returned -22 [ 581.207552][T30317] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000008421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 581.335703][T30459] binder: 30367:30459 ioctl c0306201 200006c0 returned -14 [ 581.347607][T30459] binder: 30367:30459 ioctl 6609 0 returned -22 03:35:04 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xffe3, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x81000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) r3 = getpid() migrate_pages(r3, 0x8, &(0x7f0000000080)=0x1c, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:04 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_pts(0xffffffffffffff9c, 0x40000) ioctl$TCSBRKP(r0, 0x5425, 0x8) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000040)=0x100000000, 0x4) [ 581.427685][T31865] libceph: connect [d::]:6789 error -101 [ 581.441577][T31865] libceph: mon0 [d::]:6789 connect error 03:35:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x3) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x48000, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000080)=0x45) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xc, 0xfffffffffffffe4c, 0x143, {0x0}}, 0x10) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0x408d, 0x400, 0xc995, 0x1e, &(0x7f0000000040)=""/30, 0x15, &(0x7f00000000c0)=""/21, 0x74, &(0x7f0000000100)=""/116}) [ 581.477900][T30557] binder: 30553 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 581.477913][T30557] binder: 30553:30557 ioctl c018620c 200005c0 returned -22 03:35:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000000a421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:05 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x10, &(0x7f0000000140)={&(0x7f0000000000)=""/233, 0xe9, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r1, 0x4) 03:35:05 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0x200, 0x2, 0x80000001, 0x8000, &(0x7f0000000040)=[{}, {}]}) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0x101}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000680)={r3, @in={{0x2, 0x4e21, @empty}}, 0x400, 0x400}, &(0x7f0000000740)=0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) eventfd(0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000540)={@mcast1, 0x54, r5}) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="48020000", @ANYRES16=r2, @ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x40000}, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={r4, 0xda, "9b998f999970a37db0b3dbddb1c09d635725cd42340db7157babeb8e918a9d645fb7a09c5fb073a8c5cdb7b2177e9c7725efe50a1b14218def3d1cc78aec5aa0a62acc4dc6f742136d72dbc714ae958c37881f3b965ed84027a38a2393d4d1a2c21d1d910f8b0b0878cc1b57ca5a6bcbf1b91f8f01e6c351c361edce04e03989efd80199696b46745333e4e12cd1c5939beba8e5b9f2c045df1a6b3cb54a59a5d048928118738944d9de1a2941fdf5845a64d9ad83a5077ff731b5820ae61523fcae3a3fde8262939963f8cb81fa595f8ba7a7c88fd9aa4ff30f"}, &(0x7f0000000300)=0xe2) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000005c0)={0x51, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000000c421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7ff}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 581.734079][T30761] binder: BC_ATTEMPT_ACQUIRE not supported [ 581.760614][T30761] binder: 30760:30761 ioctl c0306201 200005c0 returned -22 [ 581.764254][T30766] binder: 30764 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 581.764271][T30766] binder: 30764:30766 ioctl c018620c 200005c0 returned -22 03:35:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000000e421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) 03:35:05 executing program 1: clone(0x1fe03, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x2f, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 03:35:05 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x8000008010500d, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) [ 582.000657][T30984] binder: 30983:30984 unknown command 65537 [ 582.022912][T30984] binder: 30983:30984 ioctl c0306201 20000000 returned -22 03:35:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x5, 0x5, 0x0, 0xff, 0x1f, 0x5a5, 0xa16a, 0x2, 0x1, 0x6, 0x3}, 0xb) 03:35:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000000f421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:05 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x201002, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0xfffffffffffffff7}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_hash='dont_hash'}, {@obj_user={'obj_user', 0x3d, '\']'}}, {@obj_user={'obj_user', 0x3d, '/dev/binder#\x00'}}, {@dont_appraise='dont_appraise'}, {@dont_hash='dont_hash'}, {@appraise_type='appraise_type=imasig'}]}) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) 03:35:05 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xffffffffffffff9e) r2 = getegid() getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000003c0)=0x40, &(0x7f0000000400)=0x1) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, 0x6, {0xff8000000000, 0xffffffffffffffc0, 0x0, {0x4, 0x0, 0x0, 0x1, 0x3, 0x4, 0x28af, 0x1, 0xb5, 0x100000000, 0x1, r1, r2, 0x7, 0x1f}}}, 0x78) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@initdev, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000440)={0x9, "fb1045fcb18800c5380d193f51a525dfe262b76b0874f0a7eb27c7992462e22b", 0x5, 0x8, 0x0, 0x9, 0x8, 0x4, 0x81, 0x80000001}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16b2da6f4f000000000000007f44c9acfc132297d1c902a6dcd8640032e69d9a2c895547b634beadf7a6c8c985d81f5d6d09bfab7a5a6bd2"], 0x0, 0x0, 0x0}) 03:35:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x3ff, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0xbb0000, 0x80000000, 0xffffffff, [], &(0x7f0000000080)={0x990afb, 0x3, [], @value=0x4}}) recvfrom$x25(r1, &(0x7f0000000040)=""/18, 0x12, 0x40010021, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000000)=0x80) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000100)=""/197, &(0x7f0000000200)=0xc5) [ 582.339561][T31207] binder: 31198 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 582.339576][T31207] binder: 31198:31207 ioctl c018620c 200005c0 returned -22 [ 582.360157][T31210] binder: 31204:31210 unknown command 1876603414 [ 582.379641][T31210] binder: 31204:31210 ioctl c0306201 200005c0 returned -22 03:35:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000010421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 582.387945][T23889] libceph: connect [d::]:6789 error -101 [ 582.393671][T23889] libceph: mon0 [d::]:6789 connect error 03:35:06 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0xff1a, 0x0, &(0x7f00000002c0)=ANY=[], 0xffffffffffffff96, 0x0, 0x0}) 03:35:06 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x400, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @loopback}, &(0x7f0000000340)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000380)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x20, r1}, 0xc) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x113000, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000040)={{0x2, 0x4e21, @remote}, {0x307}, 0x20, {0x2, 0x4e24, @remote}, 'lo\x00'}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:35:06 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffb, 0x60900) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:06 executing program 3: socket$pptp(0x18, 0x1, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 582.600873][T31533] binder: 31532 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 582.600886][T31533] binder: 31532:31533 ioctl c018620c 200005c0 returned -22 03:35:06 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000020421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 582.697510][T31548] binder: BC_ATTEMPT_ACQUIRE not supported 03:35:06 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x14280, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xffffffffffff7fff, 0xfffffffffffffffd, 0x401, 0x1, 0xd6}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:35:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000028421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 582.748515][T31548] binder: 31547:31548 ioctl c0306201 200005c0 returned -22 03:35:06 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="26745140bbb3302d830b35e53700414426b64bc5eea3416646681407c1878a20936f0fbd48de8a21c5ff1c27c78808c3f6020b74ce98f19e20b7cf7ccf7e3b75c2facffd6285935a5a9542eec3845dabb3e1e7df137687088766b070b7b73060bd6dbef894b52dbf330734ed68f7ef6efea99ced78d59e168ef906df046cab0684d04835d4512dded7cd01462f9223ac4cd477a335c3c531f87686928df70316dfb457a862ba10e5d7918808c0d42412a2093253675cf9aa1e949c0168ff361215d7569028bcb6b157ab76cdf9e53c826b73fbb64cd59d12bd5d3abf2e3c648ad212fb07e999aac2d9c6a50a959e0c0c2e92d783fe4f62d6a71c3e5e4d2de987d0704d38a408d2a2dc661ec7bad6bf5496bf0bf3f715512392282b1898ebefddeedd9e07dc20d9ec83c6526631ec405d4a82ffa4d48b24e77f05616ee1325b191a129f63f1d4db01727d02d2e4efb906b2ef63502587846e7b00ec2b7415c5c9eac3e59c59db30a17c63797f2db83f2ec42b3a53a25a6007ede6bcd8c34e1ff2d90096124a2a9eab3275c81d02a7b5c5050101741ffe2f0dbf97620280f8bce93e2e037c2e50edcbfc39b9d01720746926a28ed59ba4ee153575f4a84c234b2114e6c6cc3ae04a9e63b5930c96b947188ac20657017c949468cef3b6d06f5f3e805508215ee0bbd49f8a55f6da2caf09edc32429c32b18b9a721fe5a81580777e495620c921171e2a2379890d4b4636d4d4f0c763ef6ee36e9e35dba88e49c6bd570728f40e7d62ae099260ed7a1c25b29c1"], 0x0, 0x0, 0x0}) r1 = fcntl$getown(r0, 0x9) wait4(r1, &(0x7f0000000040), 0x2, 0x0) 03:35:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000003f421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:06 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x101140, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000240)=""/142) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000040)={0xffffffff, 0x5, 0x1}) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000180)={0x0, 0x9, 0x6, [], &(0x7f0000000140)=0x9fbb}) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f00000000c0)=0x326) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0xfffffffffffffeb2, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000001c0)={0x4, @rand_addr=0xd053, 0x4e22, 0x1, 'sh\x00', 0x21, 0x8, 0x76}, 0x2c) [ 582.939441][T31873] binder: 31856:31873 ioctl c018620c 200005c0 returned -22 03:35:06 executing program 3: rt_sigprocmask(0x3, &(0x7f0000000000)={0xb56}, &(0x7f00000000c0), 0x8) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x180000000, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:06 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa40c2, 0x80) getsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @null, @bpq0='bpq0\x00', 0x8, 'syz0\x00', @bcast, 0x3, 0x7, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 03:35:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000048421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 583.022843][T31916] binder: 31915:31916 ioctl c0306201 200005c0 returned -14 03:35:06 executing program 5: clone(0x4000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x80, 0x7, &(0x7f0000000440)=[{&(0x7f0000000080)="2c244fec71a148fd6f401cca3611c11bdb3ce2b48045cb737a62", 0x1a}, {&(0x7f0000000140)="ea9cbe76fdc9e26e7d26fa61d016d442ee6d1c44fd503db342e18c1d1f5e729c51fec3c660c4208b0de0720e516181bb6abbcfe632ce95a81eca3389e1e1ccb3b96054bb5075090eba00460935f9fb0ae6ff0b8d4b922596d91ac0fc80d44de7313638f7a484cccab490df78388fd7e2de14d7c0fbc2650576585937c5f671d316882b3d26b2aba94d801040", 0x8c, 0x2}, {&(0x7f0000000200)="d6f08ad19297ac80a5509b6e52a74507044116cefe270e1c7236da8f6623cede4dc4ecd0db1caa3699c30c0ecffff52d99f720bb8494c5314775b9ddadd410832d601e774e2bf042442914e2b23d5026557e5571a0e1ccf65c65ca68abbfdc21d31f691f5cc8db7e6161d2e48d20cfb23cae28893a1ec6e4d1387e99470a25128170ccc744f31081546c6c7debc2e62906822c53bae193ce58", 0x99, 0xf70c}, {&(0x7f0000000640)="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", 0x1000, 0x7}, {&(0x7f00000000c0)="116088cdd5dfd33d47702b50c5c511a716813713d4a8df61f7a481525eee47d80e2f57679e685eab0682cc4fce7046198821c72db01f6f2d80", 0x39, 0x1}, {&(0x7f00000002c0)="457ca568b36dbd4f206ba91626520a00816acdc975a44dcc6e54313965f16a443ef1ff7c4d82f89349eb5d58ca071f4d9b6c4fdcbc4571c746e56362f5f77d119b7c2468f7c1256d85d85468a0365b0f08de33381628522dad5f2b88facf2c4149a9eac3e294ba25c77f6d7efd6f877aa557c3915a0ecad7f2929795d96b276fe6111471aa6a0a2f710973379b14168481f4643af39805e7771c761da0b83180333efde99b5f6d3440a789f7b937a16b52a0e7f880eb8ab8a802c08e2fd1ebfa0b4c80c3a15a2a2516364cfdce0d68d5e58601c0794f3072e5fdf0ae189faa7bd541d934b274d5aa8677848b02c3defa7f282b3a74", 0xf5, 0x5418}, {&(0x7f00000003c0)="246bbaed8d1600e8e7e94f1e5843086a63bbeb4dd327232a1d0f4b1b590c83d588bf139bf8cbeda916fe2bce103a4eb569753fa95118e870c019121abea8347e7c592c10ef27d8590ca0aff17a879fd9314087d90247ca0e633f0394", 0x5c, 0x4}], 0x200001, &(0x7f0000000500)={[{@creator={'creator', 0x3d, "191e1fe0"}}], [{@obj_type={'obj_type', 0x3d, '{bdev}lo&\\'}}, {@pcr={'pcr', 0x3d, 0x31}}]}) r1 = accept(0xffffffffffffff9c, &(0x7f0000000540)=@alg, &(0x7f0000001640)=0x80) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001680)={0x0, 0x4, 0x2}, &(0x7f00000016c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000001700)={r2, 0xfffffffffffffffd}, &(0x7f0000001740)=0x8) [ 583.090888][ T26] audit: type=1800 audit(2000000106.609:37): pid=31989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16561 res=0 03:35:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:35:06 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:06 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a7942ff07a89ce9cee2007e"], 0x0, 0x0, 0x0}) fcntl$addseals(r0, 0x409, 0xd) 03:35:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000004c421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RSTAT(r1, &(0x7f0000000040)={0x89, 0x7d, 0x1, {0x0, 0x82, 0x5, 0x7, {0x4, 0x4, 0x7}, 0x10000, 0x0, 0xf359, 0x81, 0x18, '/dev/infiniband/rdma_cm\x00', 0x18, '/dev/infiniband/rdma_cm\x00', 0x18, '/dev/infiniband/rdma_cm\x00', 0x7, '},usert'}}, 0x89) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:35:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x204000, 0x0) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x8, {0x2ac92259}}, 0x18) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:06 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0xfffffffffffffee1, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0}) [ 583.413596][T32317] binder: 32316:32317 unknown command -12420854 [ 583.426425][T32317] binder: 32316:32317 ioctl c0306201 200005c0 returned -22 [ 583.438334][T23889] libceph: connect [d::]:6789 error -101 [ 583.452641][T23889] libceph: mon0 [d::]:6789 connect error 03:35:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000060421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='nodevmd5sum{!\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000015c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, r3, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x50) ioctl$KDSETLED(r1, 0x4b32, 0xac) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x14001, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r4, 0x0, 0xe, &(0x7f00000003c0)='nodevmd5sum{!\x00'}, 0x30) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000500)={r6, &(0x7f0000000580)=""/4096}) ioprio_get$pid(0x2, r5) sysfs$3(0x3) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000400)={0xc, 0x3d4, 0x143, {0x0}}, 0xded6a587c3ca688) [ 583.513481][T32408] binder: 32357:32408 ioctl c018620c 200005c0 returned -22 03:35:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000000c0)={{0x0, @multicast2, 0x4e20, 0x2, 'rr\x00', 0x8, 0x4, 0x6f}, {@multicast1, 0x4e23, 0x2002, 0x3f, 0xfffffffffffffffc, 0x1}}, 0x44) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000005865421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:07 executing program 1: clone(0x1000000700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:07 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x10000, 0x0) recvfrom(r1, &(0x7f00000002c0)=""/141, 0x8d, 0x20, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140)=0x3, 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x500, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000380)=0x40) write$FUSE_STATFS(r2, &(0x7f0000000040)={0x1b, 0x0, 0x5, {{0xe0000000000, 0x80000001, 0x3ff, 0x8e9, 0x1, 0x9c3, 0x535021a3, 0x100}}}, 0x60) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a6408040000007a0c86d6a2627ce556d6a93b47c09702000c552ae69a0742f1f867f13f7941035d783240e183625ed21c40b2eef2084c3a91fb000000000000000000000000000000e591d0829541aa216f895a25e96e226cbd8c8552273044e642d2d95db09b5793fb8a5a4fb4a225d97626119ce88e8bea18721c3433d8d5066c831fd1bdbb05b0b9cfec1c64f6a9305237eb73a748ecb47db4fe53c5389dfcb0e486cfb8ccb782606c0d178f9b8ee74d42716162908b3d5a9b3357"], 0x0, 0x0, 0x0}) [ 583.722523][T32659] binder: BC_ATTEMPT_ACQUIRE not supported [ 583.777980][T32659] binder: 32658:32659 ioctl c0306201 200005c0 returned -22 [ 583.812725][T32692] binder: 32670:32692 ioctl c018620c 200005c0 returned -22 03:35:07 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045004, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40a00, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r2, &(0x7f0000000100)=0x4) 03:35:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000068421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:07 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0xf6, 0x6, 0x100, 0x80, 0x0, 0xaf, 0x200, 0x5, 0x4, 0x1000, 0x0, 0x35, 0x1, 0xf3be, 0x2, 0x4, 0x3f, 0x5882, 0x6ffd, 0x2040000000000, 0x7, 0x4, 0xec0, 0x80, 0x79f, 0x1, 0x2, 0x8000, 0x0, 0x9, 0x5, 0x8, 0x2, 0x0, 0x2, 0x4, 0x0, 0x4, 0x3, @perf_config_ext={0x0, 0x8c}, 0x500, 0xbe, 0x8, 0x6, 0x8, 0x8000, 0x1000}, 0x0, 0xc, r1, 0x2) 03:35:07 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x40, 0x0) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x1, 0x1, 0x7, 0x9, 0x20, "ce778f328186fa8e6f3de05ccac12e0d1a364bf8873245d4c9e6b6b04615b3a84d57ba630ac8ebab0d02ea21f8986757733dd6eba9bdf7bb8f320940e23a84", 0xd}, 0x60) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pipe2(0x0, 0x800) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x4d, "1ad8f598519264c5d386a3d035e901e46fe14fe6bef55db3d5011c50d807f01a500541bfed3b40bf573f8a3063925b9ffbfee8f39c31711e5004daa97a16e671b08cb37754507efce7ea7da483"}, &(0x7f00000002c0)=0x55) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r2, 0x0, 0x6}, &(0x7f0000000480)=0x8) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000400)=""/105, &(0x7f0000000000)=0x69) futex(&(0x7f0000000300)=0x1, 0x0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x2, 0x2) r3 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000006c421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 584.127968][ T527] __nla_parse: 17 callbacks suppressed [ 584.127978][ T527] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 584.154920][ T521] binder_ioctl_get_node_info_for_ref: 3 callbacks suppressed [ 584.154928][ T521] binder: 519 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 584.154939][ T521] binder: 519:521 ioctl c018620c 200005c0 returned -22 03:35:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000680)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x10}, 0x7}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x400}, r1}}, 0x48) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000580)={0x5, 0x2, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x50000) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xffffffff, 0xffffffffffffffff, 0x6, 0x9, 0x0, 0xca8, 0x1, 0x4, 0xfffffffffffffffd, 0x5, 0x5, 0x6a, 0x2, 0xd, 0x8, 0x0, 0xff, 0x2, 0x6, 0x2, 0xffffffff, 0x100000000, 0x4, 0x2, 0x2, 0x40, 0x1000, 0x101, 0xdd16, 0x5b09, 0x7fffffff, 0x100, 0xfffffffffffffe00, 0x400, 0x2c, 0x200, 0x0, 0x7, 0x6, @perf_config_ext={0x7, 0x2}, 0x5eeddb8347f23dc6, 0x6, 0xa, 0x0, 0xfffffffffffff5fe, 0xd24, 0x9}, r5, 0x9, r6, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x2, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x10) 03:35:07 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000d297fed21"], 0x0, 0x0, 0x0}) 03:35:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 584.310301][ T847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:07 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, {0x4e, 0x8, 0x1, 0x2, 0x3, 0x8}, 0x1, 0x4}, 0xe) [ 584.445544][ T859] binder: 858 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 584.445558][ T859] binder: 858:859 ioctl c018620c 200005c0 returned -22 03:35:08 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0xfffffffffffffffe, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0x6, 0x2, 0x1}) 03:35:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000074421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:08 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000940)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffe0}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x100000000008) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETA(r2, 0x541a, &(0x7f0000000140)) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) 03:35:08 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/stat\x00') getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0xf85, 0x5, 0x2, 0x5, 0x8, 0x400, 0x400, {0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x20, 0x8000, 0x1ff, 0x1}}, &(0x7f0000000780)=0xb0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000007c0)={0x0, 0x2d34}, &(0x7f0000000800)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000900)={&(0x7f0000000500)=@in6={0xa, 0x4e20, 0x401, @mcast1, 0x8001}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000580)="7afdc6cb8c2c1407a2b100a3f24313831952af1b6e24dbe9c18f1fee202572ed828c6694ae61527f80ccc139395b3349e096a01628167b08d42ebb8d43b0b89fe13b602b", 0x44}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000008400000005000000300020000600000018000000000000008400000006000000020000000000000020000000000000008400000002000000010000802000000001000000", @ANYRES32=r4, @ANYBLOB="180000000000000084000000050000003000000001000000180000000000000084000000060000007f0000000000000030000000000000008400000001000000fdff04000500000009000000f7ffffff020000000001000007000000", @ANYRES32=r5], 0xb0, 0x4000}, 0x4000000) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x30e, 0x1000, 0x400, 0x6}, {0x3, 0x1000, 0xfff, 0xca2}, {0x800, 0xffffffff, 0x8, 0x6}, {0x2, 0x1, 0x9, 0x5}, {0xfff, 0x5, 0x0, 0x5}, {0x200, 0x9, 0xffffffffffff0001, 0x64}, {0xfffffffffffffffc, 0x26c6, 0x8000, 0x6}, {0x0, 0x200, 0x9, 0x9}]}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x18) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000002c0), 0x4) [ 584.697342][ T1199] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 584.704136][ T1194] binder: 1193:1194 unknown command 1042703114 [ 584.747069][ T1203] binder: 1198 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 584.747082][ T1203] binder: 1198:1203 ioctl c018620c 200005c0 returned -22 [ 584.749566][ T1194] binder: 1193:1194 ioctl c0306201 200005c0 returned -22 03:35:08 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @rand_addr=0x7}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, {0x2, 0x4e21, @local}, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x10001}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x1b3, 0x143, {0x0}}, 0xa) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000100)={0x3, 0x9}) 03:35:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000007a421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:08 executing program 1: clone(0x4000403102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "5d7fc726d8cf7a0649b28c95b124898f577b59c1ac74c75923803e3f77d6206acc01735a769bcdbb6e70a869ef097ea96aec4fde2c87bba41555d74c1be17a3c5aac8ca2f875c3b574a7543cf1786cda862650db478e70dc978e"}, 0x5e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0xa000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 03:35:08 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xb, 0x200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000040)={r1, 0x81, 0x101, "63782c15ad3c123e12f4d487920175e0f644594bf3b99c6f4213a461a0ec2111308901add805bc53729a2ceac2205d44581ddda67a8640b49878f9f1a0653232a6e84fe90ebbe9e4c60b1e18ba554ef7634736bd4a7330087961938171f9ba0f5285e90a6193"}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xc, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x3310, 0x34, 0x100, 0x70bd28, 0x25dfdbfc, {0x1c}, [@generic="e75cc4dec285f3a6ec5601dba12b0759893efb1420826aa1a5fbb6bdfbd8f400fd43f52a7459ac10b16c8cafbd4cc7d03cf0b3e42eb7e8ae5e2dd030272cdd93e84f4c045968bb1e614547a028bba508c8f696b91860884c712c39ee45debcd88bd0e85b31f57cb4a18dc637c92e4f4de68ba9a3b8aba1c9e4132fc9a5f0c82ef6aeaf6bd830004268e65b4c9b8f83a5ad42ed42a08b759036089e1f9abf2836995da0a21cc1c6675189734d6ef729507d9f1d054153050a2dbe176ebaa6b480afbd0853c31c3e24d31c39b331dd0ddca3ec5a53c36c5b992aa0bfbaa3742ea0a30ba0785ad133eadd967cfe11f66a4f2ba1aabc5d6f34ce4a2390837f60b61411001de4211dfd64b403902740ca8e0e714e79f5afba14f7c2f8e705d1b47d4540fef2ccb08c87ea72029d6ad200eec424034bc6effc4c08504d7967f6a27db6147dfc121f832934bc06dcc9e29ef2a7b73f3dca2f1d3d32bb7214d028c69f66407bb27aeef2e8a9c2e6251cbab17a850d0d343a3f3a3f96b3f50c5a5b570bee05743df99b841e3fe8998899449a3a16422513ad364db00687f12da372312c18686fa7ac33486a9f33f84fd6eeb8dccdce53e4ab9b14077ab119f82d4289ef71d6f3f1cefdf9dd86e817928e50d7b9fb5d9c2e0c50c76df044136c11be5c6261f6ea4eaa31ac89e54eec164f3c6502376f61264bf62a338947de81eede7132ad2d360b337ef0517cb09f519796bfdcfe5fdc58facb87f7ccb7329eac707baf5d773d047dc3195ba4c48e3e3093d85822da90b4fe1693772abe9c62f7609612cad2e4b2e524de68b2a7107dbb66acfaae8a628cee2bfae461585851c13c5877d9047b1e004f23c42989bd4db6fc301f29a43b90d3fc59948ea478a420f5aeb177c90338a994ec4af10340a4caa6232848dfb8586bb183327c6cb9c9b0c5222d22668f2a6d16f26c124bce92565f1839f50ffe28c00cbb95dccb6ce694b5aa91679db7af15a117c8a9087850c15c91d6d5fc7f96aa799ec2c19918e0377e1906afaa0d08073d5009d5d7a05f07a041020fa3e32cee35a73dbfeeec0bb10e649b9c951003430cbd918413bb2bf0e608c2b04c4b3c4d8784fb7e3ac80d0c3d4b408cbb67301b1609accbe9f1e6cf8a7d575349d191c7ea1fb385458348e2a4c178fb2d7a090ecf497d54c13a9a74edcbe53d6c7ca00f5559adb3d53893fd1c1dc10caea847ad0b285f9964e87f918ccb67e8277e71ceba641b862270c21f6a797660279707415f8443069142e27621e473d67a14c928a6e0f59a3f7ca79b6c24d93dc6dbcb78eedbb8ef834982ab4fb8c9e462a359598b53242784609fba1cfe7e7a71c17817b2f56457c2f189a1452f309e75d2f2ef50e0ae7b9e14d2ac196880dc493979312e97deab5b22b125d1b93049d4bebb3e55ee5791c70444d239cc5a6a7f4a8f5f37a04670b83ec2fa6aea316aef79bb9e571337439d0be96d79d57998a33e193947640ae396cd565ee3f6469d29ea7480e383faf0de5502a42cecde4e3d987bc373730501725bd28547a7f9e85d54c5ff3803d3c532422978e52078137477b01f00a7d55d5226cf2abcf81b20e807a2123403f517cb0395f00c3c28de262bfb35e71509df1561a156f8c29c50f1db951ed4d6af01a2f339430c33ae45ba2dfaee070f929caabc370e4867d264a052c9f673d33c1147d40bbf04c691cd6081a3a87d4f7dade5d2169ceb3c2723b601947571478309d067127f50f7a7f9a1ad7b86db9ad2b1bc43de79cf42b15f95a2a42bb561144a6524d27747fedc96d8fe2bd130c100a360595aa3ea72c16969a80b9b1bcc7c11dd9ed278a4fc52cf219e8f5db61fbd3fbbeecd46ff4fab75173ae893d70926a3fb7704d478e9a6f0aa31f1b2d1ed59d2903e5da2e62ffc82316a87b16ab033f4ee7e0de1eae3438ff86097d2bdca87e6815d320f81a7d0c55eb0c537a3fb25102560330d75fd85d6881823b81ce1cede08b1d31f6d648f72b0b8f3e5549a9b4e635d43451870bec9cafaea6567522a703c3c68270ff2711ac25b3d5047b4c267d43eb9542b0973810ce700d51fd26ca1fac766988a6cafb94bd24f5e0d98d5a01ea8f28116619d4fbabe42f3fab44d154bb3de3363c3cd220e6bd62166d035112d63de4b9ea97f773b601a93066e509894e7d0222f11e33f3a3258b62555e98504001477a268ed322ae2bfbd9180243f02674017a7d49ac8a1138ddf3d659b5b548d9be6ae802cf5af916c162bb5b581c6ac9dd58da8337aaf657046a0297f20d6d410966f409a7bcdc0cabe51b021eb32b17877cc1b4d3308b4ffeee6f40d25f16acbabe5fa40740377ea0c9caddfbcdd7bbe1604bc9aaec0fc99063c17d1ad340b56ff0c4cb2cc0a2b7b66595a9c0da936e38aed11591b1e90fa23683b175cb265b54d478805e692737a3df71d11158ea469764c462a5c89aff934d915e938a490b773d4b34ad5e5470736731678ea01bffeea44b2b28e2b50dc17caa9b6f00885f6eb671109884f0959dd30f96de0ce657127b2700d20ca05578e66437f986d9fa7d4e8c1df44c0dddbd505a203ce581b9cffb4c98ca334bf573005158af4a714e6900e4fce3c761c9a69790f16579f33076a2960e0c19753bc21773f001aa69924e5d4693e0b79da37a108a1cddf7a3178fa0831a90323d85ce58bcec1fe8a04291d741eea6fd29811b60ea333c913beb0cbfb917057aeeb0bc216c251da34e1503600aaad45dfb2af6bf495e962eb91ae3c2f08cee43791dde5178c4e8a8bb717cd6d30a0517cb562b7edef2198bae57537f5184d649757ab1d391d2d3675c1b2df73d11cb374ac681616a8f4f2ea77b025d76325fa8dd82d5cd10e64db484405165b027b7d8916b54469f519f22d70ac05ddd92ccce38c59a191f361421f87ba9c3125f21a07cada7661d3e47a60d3373140977a2a170f3be86edb4321764a9cb2615219476177b352e5532ad5a785484953dc72dda74c3e003aaf2144bb7e7ea514a8d71b21b2e6c38fc8d7940276bb54f6b8a8783ed1915cf6f226d1df8ea91a63f564d4e6e395ee66af0ec465ca1cd1f20ee78c8260774f1baaff8856aea55f4b27861fe91a013678cb441787d1b7ddde33245cab4ff84f9573b6c037fb271d7cc9849ca501502f953877803b042ee3e9ba63a9057ca448abfb14130386905a31358c50db816448cb18d90bb234d8b69b0e80ddaf0eb2a42de75528fd4077bc728a303026083f86b66d1b0e112ccff228b41e990d83391d7f8052cb57e3bef48de3bfbf405eca51bea308f0e788fe06e25c827bca01ffb48b4b0b890a18460ce48b6c60721e46affee6c645e17535e06413e144973d8e7efb9b43325b9e70b05b5d64c2e601296ffaa78fefaa2ca5311622c8a12178414d070f614434a94ba315d5fc685619a797fff9c17eec7c8e5ee4ef9998933e149b03f0a3b5d94b5a2b20c04b5da81cc9f15f32029ebb5e19cebf2ce81e73a53c797578e6eab0abb68b471d3f9e37e3f101f1625231f1aff5304e25cda77401e7dbfe573701846421a202d42936411732b3ecdfc428d2b4518ceca18d3b3be6437a0a1df30ded026ad96048545f8f5f7aa73a164a40baab7ca7c5416f68c204ed571204f8a7c529f93c23c9069b4f703b270da1190cb1cc1ab40cdb475617eb7b046eecd97eb2996772d8ff0ff7273217155c803df501ba3e1e6f0a86fa38a07b18bd62c20e89e68c90e3e0906a5a4c82f773148e71a308a44d898829474f3fa3bb625beaae7764c9d757093dd06cfcefa220ec89c1186cdb8c3b9000137892011572431a37c9892fefb0fd36fa0f4790f9ee2dc64b3b2295ad07939df3a9e71d04a18077bd1c3a032d7797480ad15969cc414d0de8616cffad43f0967e6fc940e7f3173432c09bc95926b2fab38b0aef4e8a0c1c9dcba03613b1e960ac96b9664e5deb681bd777139db473c176553d1dbb464f357adfa4e0490d85a5ffaf88ae0f1af1d6813ce1c9f87049dd14691333838f8a8434acf40de3f787720c18f3b8e72222b41c9242274ce9992b23d87b33471c47f88cb28a4f028159dcbf05dad645fdb1a83b357876b0a9a03bad0378263286d970d43b58d9b445027a9dee946a0178c5e0e55462fc3231484769a51a90625e6b4bd137756bac33d98407d16bb07bed2b7593d95e78bf18a8f07332bf4200fb3888fcadfe6a94029142cd389dc58b95315f22e9abd2f00a6b5584f5d35618ac306f22eac26b1a504039698212a770dba2924292ac0f15834059ed9716603fe0b49621af4ef9ad48bf4b8ef19fa5f33f2ec2f5e926cc56d4fd4709c95fabc58160892379f046d2c99c92341c92b792342c39e626953027664d24dce2a08a9f726d22c8303212171e3ef1511551ee31dac78c0998cd9610b721bdb4234ba6a5c7e74a86d0e4ce13ee77d4670a1bf63e650f55e58e1c64b04bd5b86c1e8081115c47f262e7b11f3bf21808fdb1f0cf39367e8136fd3595fd7d4b9ec90d2abb77a391d191b26f16090d789f5e55211eff4f38e9fd6a9ee844ab42d0ac39e9800cfb2b21764d187de8ca9ea22913aed7ff62be4712e2398f4d7492fc9d1aba9538a023a2032a8df95b7834b3a5c4988fb97496dfe686b399c2238d10a56572b5c75c6464abae6d394aa68354d17f992cd383fbec60aade3ea9ab7eb95ad5819993200679fd187ed4d3ea72f0f0f0e7644c45f81da65d7d1ebe6a11a6638e855ef9e041159a5226437417fdcb93a623887db7a7a0e363fa8b38ca18f17c5b059f793ef66458aacee148fa17cd536e8a9904902f0221fee4818286afee2aa527d73c8d9a8a348a6e667136f0d568f5cc909c0232c82e44b0aa9085d02c7210e5745fc4bbb22d2a0b188c84f058b6bdc611de9957ae64d4d9bb00a2399c77da89693a4747c59b88baa1699d8801d687102e7dbea46657efc4c82688054ca5a13ae05dd9d392836bbceed450ef30ea3184bc0dfd8109f76627c02aa4c09d59bf54faee24bf67165cf25fcc9ca894e21016eda2f3d2f83e09262d51f396f78691c199270b0bf79a5e1572403bed4cf2f89b0d2ec5802863a9ea6fdf3f3ff6e6c44700107db51a0868c9976efea37b297635f6399c7384a847613cc6b570ea62aa066269324ec84f315da8d3f715a6e31c01f9dea701ec4d7e7625b646412097b3194f1a641a527c1245b74b1f18e30abc5cba0b69c780b0cabb96cdbe5acdb8097f6c030a25fbf96156c7c8ce772242c3ff174e2650c54bfbc11bcfad42a57b01646cd8c5e4de7f48a2eda97876a1a692d0c7ce4a9c2d54b8ec6aed3f56f51f5609218ac5b0074d090f00bb3e9103fe96717416db5a098fb800ba6c20eeb93e14edfc5f9fcf13bc667c30cda3431ef37bdd5449270ebdd2b545370b0e6c54cecb9122e9cd15494656870ef7f095c00a3468c1fce6531edad3ee62e7d3378a66ad8dd3ad52688352f1a246e813f3e5ba7e530174a65c9ca1bc028cbafc0f48e09b2bfd539e001e321581ace24a09426afcd6d9e6651fae732d70075352b1707b64b59419e421ff05cc524a0f293731107f1765951382c1b0f93003215dc67c71901b569a4d7e62d3d60e30aeca8aee73db91fc24aaaa085ff3ec8e92e0c0f37d48627856458ba86f1add0915e67b9613069b69fc07c806dd64ca25745866a046cd6a0c5569d4d1b8c31e5ea1de14bfeaece7a624bd8ddf4bfeb3a0868b6b0314e30ad038d28e88339bd08d3f5d78a5760526cb96b74e34e796217dd2073fbbf9", @generic="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", @typed={0xc, 0x6e, @u64=0xbb}, @typed={0x8, 0x48, @u32=0x3f}, @nested={0xcc, 0x3, [@typed={0x90, 0x33, @binary="9b733b27bdbb7d89a4439c68f9231c3f2607fd2c3a941e9188580e9ba14301403967e7dd793c410f9cfbde934599daaec317a18d5995fb57553a3b46920b8509c8e405df6bd4829007483558273e3850acac623d4ce26277727e43ee7b12010abc4047752b21606d6a75a09e094d4979095d087d10e99517f5ac8960dbf714c0c3ea80904bcd964b18c4"}, @typed={0x8, 0x21, @uid=r2}, @typed={0xc, 0x89, @u64=0xe91}, @typed={0x14, 0x66, @ipv6=@ipv4={[], [], @local}}, @typed={0x8, 0x60, @u32=0x2}, @typed={0x8, 0x6d, @fd=r0}]}, @generic="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", @typed={0x8, 0xc, @fd=r0}, @generic="d01e0ddea3", @nested={0x1f8, 0xc, [@generic="5fcdcab57ea22bb31e6df284881dc1097b269cbe870f39e2b79b70cf5eef849f2a119098cd4f12ce9fbb9e731e1d23b3dbe6f880f7d324e30f40011e3e0b6dcb8298ee7e5668b5381fa3581d0b3421c7ae749ffc0c872a8e274d38342ff40e8ea33ad6f0105c8239ed8b70246479c583e356a5630fba0b2b7316ddc0c510238eadda6dd363023a6576d647cb0fae383ae1b051f4cd247c6f037f7712fed3b79fc259a650db7fa1924ed2a0fa0e09fe532510d396bd0c304d2a3711c767b4", @generic="12693d6a510f6442de0e7970519ae275f3aa6bbc8c6ccfcaa46bedcb5dfe7cf6d639eae75dc61431173e33d72c55b3f6358b1f6eaf610b45553418468ecdb705f01ed4c28ab035cb5351c713903098876f29aed6b8cb45f7b5182f3dec485f5214674b3535a2bfd019e76ab603c0678621674868383e64c129b9a6095f83bda8169ffa251c0d3020afb7f472da34443cbc240993b2aacaadae0ee98774a95a82e8dcfbe379e2c0a732fd3407aa59164c6f083b18a38e6757b1ad1b4f9b1c0a46aecd2eeee8d065db713b3e6a0bc831c6603a2504a2cd014a3b33fba07a0486d4c54a714494fc94", @generic="698dff3345d11894c4367a3f7626cb5e2b5123be7050259a54655a05", @generic="093076fe87a3fe1ace8d867f0564210e48aefa5b0c65abd2530808a1f5237a91e9ec051ed61778e6dace", @typed={0x8, 0x2, @u32=0x4}]}, @generic="48a8a6a8ffb8ca7f6b924442fc2824e12061b2db"]}, 0x3310}, 0x1, 0x0, 0x0, 0x4010}, 0x4040) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=0x0) fcntl$setown(r0, 0x8, r4) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x200480, 0x0) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xffffffff80000000, @loopback, 0x3f}, {0xa, 0x4e21, 0x80000000, @empty, 0x100}, r3}}, 0x48) [ 584.982994][ T1499] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x7, 0x40, 0x13b5}, 0x1}, 0x20, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = dup(r0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x5) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100)=0x4, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 585.069830][ T1533] binder: BC_ATTEMPT_ACQUIRE not supported [ 585.095383][ T1533] binder: 1532:1533 ioctl c0306201 200005c0 returned -22 [ 585.121940][ T1538] binder: 1536 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 585.121962][ T1538] binder: 1536:1538 ioctl c018620c 200005c0 returned -22 03:35:08 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000081421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20801, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x3}, 'port0\x00', 0xa0, 0x40000, 0x8, 0x6, 0x2, 0xffffffffffff7fff, 0x0, 0x0, 0x1, 0x18f}) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:35:08 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@ng={0x4, 0x1, "4cb91b"}, 0x5, 0x3) 03:35:08 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x220000, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x6, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r1], 0x28d, 0x0, 0x0}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) [ 585.378129][ T1874] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 585.414834][ T1879] binder: BC_ATTEMPT_ACQUIRE not supported 03:35:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r0, 0x0, 0x1, 0xffff, 0xff}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x100, 0x0) r4 = fcntl$getown(r3, 0x9) process_vm_writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/39, 0x27}], 0x1, &(0x7f0000000a40)=[{&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000600)=""/59, 0x3b}, {&(0x7f0000000640)=""/158, 0x9e}, {&(0x7f0000000700)=""/116, 0x74}, {&(0x7f0000000780)=""/142, 0x8e}, {&(0x7f0000000840)=""/29, 0x1d}, {&(0x7f0000000880)=""/207, 0xcf}, {&(0x7f0000000980)=""/162, 0xa2}], 0xa, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f00000000c0)=0x4a) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000ffffa888421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 585.427846][T31865] libceph: mon1 [::b]:6789 socket error on write [ 585.454768][ T1879] binder: 1872:1879 ioctl c0306201 200005c0 returned -22 [ 585.533324][ T1895] binder: 1886 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 585.533336][ T1895] binder: 1886:1895 ioctl c018620c 20000000 returned -22 03:35:09 executing program 1: clone(0x80021ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0xfafcd8fcb6fb2047) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0xa00) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf250f000000080006000000000008000600070000000800050006000000080004000104e6ff140003000800080002000000080007004e2440002c0002000800060005000000080003000600000008000400ff01000008000600f9ffffff0800070000080000080006000000000038000200080003000400000008000b000200000008000b000a000000080004000300000014000100ff0200000000000000000000000000018b50040004000000"], 0xbc}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x1, 0xfffffffffffffff9, 0xfe7, 0xffffffffffff8c39, 0x4, 0x6000, 0x1, 0x9, 0x0, 0x2}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000300)) [ 585.584878][ T2040] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000ffffff9e421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:09 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 03:35:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) timer_create(0x5, &(0x7f0000000180)={0x0, 0x41, 0x1, @thr={&(0x7f0000000580)="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", &(0x7f0000000080)="92f4b666b8fdf0e98a9e2582aea2bb26586fc91f3371fb0c9e8fbb496df93ccb96022f83445c1c426c0006f174d66741d096faf414e15da41f7295e785a79624e7c099bc1fef575f7a913618b47233d7a074dde8c69e3297ec7180f573a43c5612bbbb71e95b2d55fe22a680718b856cdbcd0f8510d014b13530a64e959df7ef1604c9ded9bd90745cb1c53d854683ba"}}, &(0x7f00000001c0)=0x0) timer_settime(r3, 0x0, &(0x7f00000002c0)={{0x0, 0x1c9c380}}, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000004780)={&(0x7f0000004340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004700)=[{&(0x7f00000043c0)=""/45, 0x2d}, {&(0x7f0000004400)=""/225, 0xe1}, {&(0x7f0000004500)=""/63, 0x3f}, {&(0x7f0000004540)=""/184, 0xb8}, {&(0x7f0000004600)=""/202, 0xca}], 0x5}, 0x2122) sendto$packet(r4, &(0x7f00000047c0)="276f2546ad8f3d4ee51ef916af470164b7b4c2da80daa6d67bdfcb2c2dfba76b2d560da2d6a46ad19c4e5687b3a2a6be64436d9491c0c795b49189459b51929a5a9c68a0fcd7c7e3b4097476be40", 0x4e, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0xffffffffffffff96, 0xfa00, {0xffffffffffffffff, 0x8}}, 0xffffffffffffffbc) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@nat={'nat\x00', 0x19, 0x2, 0x350, [0x20000080, 0x0, 0x0, 0x20000238, 0x20000370], 0x0, &(0x7f0000000040), &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3cf) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x89012, r1, 0x180000000) [ 585.768765][ T2207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 585.818827][ T2225] binder: 2212 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 585.818841][ T2225] binder: 2212:2225 ioctl c018620c 200005c0 returned -22 03:35:09 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045007, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000008000a0421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:09 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) getcwd(&(0x7f0000000000)=""/138, 0x8a) 03:35:09 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x101) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r2, r1}}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:09 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e22, @local}}, 0x0, 0xbe5e, 0x0, "31e9e50c6624eed527a3a1f4b98fe22e36618ac4a94dc11c36764c69e94ced6be6a804982e6022ca43ea56322395272bb9636fcb58a321b31c78af31371e7f0e953d0299742af24afca33e0b223899e5"}, 0xd8) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 586.096403][ T2546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000ec0421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 586.144649][ T2549] binder: BC_ATTEMPT_ACQUIRE not supported [ 586.167362][ T2553] binder: 2547 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 586.167375][ T2553] binder: 2547:2553 ioctl c018620c 200005c0 returned -22 [ 586.177126][ T2549] binder: 2539:2549 ioctl c0306201 200005c0 returned -22 03:35:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 586.215048][ T2595] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000fffffff0421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:09 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syncfs(r0) r1 = socket$tipc(0x1e, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x1d, 0x10, 0xd, 0x10, 0x0, 0x10001, 0x0, 0x169}}) shutdown(r1, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000080)={0x39, ""/57}) 03:35:09 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xe45cdc7, 0x1) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140)) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x103) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x1e4, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x3, 0xfff}) 03:35:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0xffffffffffffffd9) [ 586.460703][ T2886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 586.484659][ T2889] binder: 2887 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 586.484672][ T2889] binder: 2887:2889 ioctl c018620c 200005c0 returned -22 [ 586.514353][ T2894] binder: 2888:2894 unknown command 0 [ 586.530272][ T2894] binder: 2888:2894 ioctl c0306201 200005c0 returned -22 03:35:10 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmsg(r1, &(0x7f0000000440)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/91, 0x5b}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f00000001c0)=""/76, 0x4c}, {&(0x7f0000000240)=""/67, 0x43}], 0x5, &(0x7f0000000340)=""/234, 0xea}, 0x100) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:35:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000000fb421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:10 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x22500, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x48, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x40, 0x1, 0x3, 0x100000001, "f376f9498a2b66fa6754542b7ce6840bf003d7d26a460d8d730814d9c08d81e6"}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:10 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) lookup_dcookie(0x100, &(0x7f0000000000)=""/55, 0x37) ioctl$FICLONE(r0, 0x40049409, r0) 03:35:10 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000088a8ffff421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:10 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0xfffffffffffffe38, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="46c78d8a915e7ac6a683e3d5f29b3a931cf2392006ac3c01dc1bc65ecb240419c48406cb939da8637cc1ada96a5bf46b2233339f61a20f95d39ad360b477bbc2d36e7efa73518b6036881489600aacecff66f956423cf2a96bc75ff2c8d9c9416397638450a4b68f899eaa50e26be21d141ec0d5d28058cedf3143ca9870c33d"], 0x0, 0x0, 0x0}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x105000, 0x0) write$capi20(r1, &(0x7f0000000040)={0x10, 0x977, 0x87, 0x81, 0x100000002, 0x6}, 0xe9) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x2f, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e24, 0x2, 'sed\x00', 0x25, 0xff, 0x5c}, 0x2c) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000080)) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000180)) 03:35:10 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x100, 0x8000) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0xffffffffffffffde, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x1) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0), 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000100)) 03:35:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000f0ffff421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:10 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x1, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) creat(&(0x7f0000000140)='./file0\x00', 0x112) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {&(0x7f0000000780)}}, 0xfffffffffffffffa) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), r1, 0x2}}, 0x18) [ 587.072485][ T3502] binder: 3499 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 587.072498][ T3502] binder: 3499:3502 ioctl c018620c 200005c0 returned -22 [ 587.144142][ T3511] binder: BC_ATTEMPT_ACQUIRE not supported [ 587.162563][ T3511] binder: 3510:3511 ioctl c0306201 200005c0 returned -22 03:35:10 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0xc0045878, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000000)={0x3, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @empty}}}, 0x108) 03:35:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000007fffffff421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:10 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10001, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r2, @in={{0x2, 0x4e24, @remote}}, 0x80, 0x9, 0x6, 0x2, 0x40}, 0x98) 03:35:10 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f00000000c0)="1e", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 03:35:10 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000140)=""/174, 0xae}, {&(0x7f0000000080)=""/22, 0x16}], 0x3, &(0x7f0000000200)=""/251, 0xfb}, 0x40000000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x3a}}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 587.439189][ T17] libceph: mon1 [::b]:6789 socket closed (con state CONNECTING) [ 587.455261][ T3846] binder: 3835 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 587.455275][ T3846] binder: 3835:3846 ioctl c018620c 200005c0 returned -22 [ 587.477733][ T3840] binder: BC_ATTEMPT_ACQUIRE not supported 03:35:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000009effffff421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x2, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7fffffff}, r1}}, 0x38) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000040)={0x9, 0x83, "2f223398f04c4d8543c099d63d4769c81ae0e713179420a6c67506b85fbdf73b30a32c500777bbdfc08dc5ea55cb769bc46a6fc947c0aa4c3d0390f1e4db4562367240249b7e0247fc9f0d1469d1c0ebe136077f0df63dcde3d30238854e1ed4289f592ad16310993f6f10e06adfbe6e38dced35209f32a6a7e1a6c7a367d23834cc4b"}) [ 587.498644][T23889] libceph: connect [d::]:6789 error -101 [ 587.504483][T23889] libceph: mon0 [d::]:6789 connect error [ 587.516414][ T3840] binder: 3839:3840 ioctl c0306201 200005c0 returned -22 03:35:11 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d53593dba9a647d7410aff415a0afc12beae121b689eb604b43f0200000000000000a8dd91219e5f33ba454c611a444eb29662aa9c607359ece0e68e8346c8a18770d3dee55bc0b00e14306563b85b2cdb027492865c90cc12bff25da87afc59ca109ef75d0d62d477c5ba009fde83e57db9c551a278455f06a2a577280000000000000000000000"], 0x0, 0x0, 0x0}) 03:35:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000f0ffffff421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:11 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000240)={0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:11 executing program 4: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000240)=0xe8) setfsuid(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000180)=""/125, 0x1000, 0x0, 0x57c}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) prctl$PR_SET_PTRACER(0x59616d61, r2) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000280), &(0x7f0000000100)=0x60) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 587.712622][ T4154] binder: 4135:4154 ioctl c018620c 200005c0 returned -22 [ 587.819379][ T4179] llc_conn_state_process: llc_conn_service failed 03:35:11 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045878, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:11 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0xb, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {0x3, 0x0, 0x2}, [@generic="ab1a0275aaf2ad5507ad678978bb3d6b1ead"]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c880}, 0x4040) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000020000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) 03:35:11 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)) geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@empty, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000bc0)=0xe8) stat(&(0x7f00000001c0)='./file0/file1/file0\x00', &(0x7f0000000c40)) syz_mount_image$btrfs(&(0x7f0000000280)='btrfs\x00', &(0x7f0000000300)='./file0/file1/file0\x00', 0x4, 0x2, &(0x7f0000000940)=[{&(0x7f0000000400), 0x0, 0x7ff}, {0x0, 0x0, 0x67}], 0x10, 0x0) msync(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file1/file0\x00', 0x200000, 0x12) syz_mount_image$xfs(&(0x7f0000000400)='xfs\x00', &(0x7f0000000e00)='./file0\x00', 0x0, 0x0, 0x0, 0x40, &(0x7f00000012c0)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@measure='measure'}, {@subj_user={'subj_user', 0x3d, 'root'}}]}) r1 = open(0x0, 0x8c0, 0x40) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='task\x00') openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x3, 0x501000) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) fchdir(0xffffffffffffffff) open(0x0, 0x402040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000440)=0x0) timer_delete(r2) mkdir(0x0, 0x0) mkdir(&(0x7f0000000780)='./file0/file1/file0\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000004c0)=ANY=[], 0x0) rmdir(&(0x7f0000000880)='./file0/file1/file0\x00') syz_read_part_table(0x4000000005245, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546", 0x42, 0x1c0}]) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000240)=0x5) accept4$rose(r0, &(0x7f0000000080)=@full={0xb, @remote, @null, 0x0, [@rose, @remote, @null, @rose, @bcast, @rose]}, &(0x7f00000000c0)=0x40, 0x80800) 03:35:11 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000240)={0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 588.075186][ T4392] binder: BC_ATTEMPT_ACQUIRE not supported [ 588.105531][ T4392] binder: 4391:4392 ioctl c0306201 200005c0 returned -22 03:35:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000030000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 588.192338][ T4401] llc_conn_state_process: llc_conn_service failed 03:35:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x420000) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000100)=0x7fff) write$P9_RRENAMEAT(r1, &(0x7f00000000c0)={0x7, 0x4b, 0x2}, 0x7) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000000)={0x8, 0x2, 0x1}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) 03:35:11 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:11 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000240)={0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000040000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:11 executing program 1: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') clone(0x800000047fffffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xffffffffffff0000, 0x2) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000080), 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x3, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a73f53f"], 0xfffffffffffffea4, 0x0, 0x0}) [ 588.374985][ T4625] binder: 4620:4625 ioctl c018620c 200005c0 returned -22 [ 588.519112][ T4667] llc_conn_state_process: llc_conn_service failed [ 588.570452][ T4741] binder: 4734:4741 unknown command 1073050378 [ 588.577488][ T4741] binder: 4734:4741 ioctl c0306201 200005c0 returned -22 03:35:12 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0189436, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ffff0000", @ANYRES16=r2, @ANYBLOB="010328bd7000fddbdf25010000000000000008410000004c0018fffffe0073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x24000040) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x200, 0x0) 03:35:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000050000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:12 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a630840cbfc6509d2b9f8b23641c65e579297788e7359c5744520ca2677679fcc50ebe8027f14ad77668c43d65884e2c498fe6c3e2ab46d1a48922da34afb45b51c00998985daace6f201bc3bc58e5b2f728dd9e1ff6c607ff11997e06d964e2c022e9f0f7ec89fb37ae5f5fbc39aff9a5fa5692ec8bcb5bc9a202d0ee72a1356ec342c15c1b3ac3e4fea42e5eb2fa3c128bf2ad8e6323a60a5b603"], 0x0, 0x0, 0x0}) 03:35:12 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000240)={0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:12 executing program 1: clone(0x10000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000060000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 588.721243][ T4853] binder: 4844:4853 ioctl c018620c 200005c0 returned -22 [ 588.731375][ T4850] binder: BC_ATTEMPT_ACQUIRE not supported [ 588.749540][ T4850] binder: 4847:4850 ioctl c0306201 200005c0 returned -22 03:35:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x2, 0x2, 0x8, 0x7f, 0x3, 0x4, 0xffffffff, 0x4, 0x58, 0x4, 0x2}) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000000)=0x1) 03:35:12 executing program 5: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@x25={0x9, @remote}, &(0x7f00000001c0)=0xfffffffffffffe23, 0x80800) accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14, 0x80800) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000280)={@ipv4={[], [], @local}, r1}, 0x14) accept$alg(r0, 0x0, 0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 588.855097][ T4852] llc_conn_state_process: llc_conn_service failed 03:35:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000070000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:12 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 03:35:12 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000240)={0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 588.980512][ T5076] binder: 5074:5076 ioctl c018620c 200005c0 returned -22 03:35:12 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c020660b, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x111001, 0x0) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:35:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000080000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:12 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESHEX=0x0], @ANYRES64]], 0x0, 0x0, 0x0}) times(&(0x7f0000000080)) 03:35:12 executing program 5: clone(0x2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x8, 0x0, "a9b6c6c64c442f337c5d748f2cfaaeda457b8d9324c46a233d608d373a934d2e86e57a32ab1abc53d40ace9a02682bbd54a3549ebc7b1308a90621311dba26a9974ed8aeb43f0f42eb4128458bc53adf"}, 0xd8) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='c\b@'], 0x0, 0x0, 0x0}) 03:35:12 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000240)={0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 589.346393][ T5196] binder: 5195:5196 unknown command 536870976 [ 589.374496][ T5196] binder: 5195:5196 ioctl c0306201 200005c0 returned -22 [ 589.385215][ T5208] __nla_parse: 14 callbacks suppressed 03:35:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000a0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:12 executing program 4: rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0xfc9aa951404a28cd}, 0x20, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$notify(r0, 0x402, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) [ 589.404381][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:13 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000240)={0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 589.506327][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:13 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x7, 0x2, 0x9, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:13 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) r2 = geteuid() mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2000000, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xb0e}}, {@sq={'sq', 0x3d, 0x5}}, {@common=@posixacl='posixacl'}, {@common=@aname={'aname', 0x3d, '/dev/binder#\x00'}}, {@rq={'rq', 0x3d, 0x8}}, {@common=@msize={'msize', 0x3d, 0x80000000}}, {@common=@cache_loose='cache=loose'}], [{@uid_eq={'uid', 0x3d, r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/binder#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_lt={'euid<', r2}}, {@smackfshat={'smackfshat', 0x3d, '/dev/binder#\x00'}}, {@measure='measure'}]}}) 03:35:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000c0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 589.650619][ T5431] binder_ioctl_get_node_info_for_ref: 4 callbacks suppressed [ 589.650626][ T5431] binder: 5429 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 589.650638][ T5431] binder: 5429:5431 ioctl c018620c 200005c0 returned -22 [ 589.721348][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:13 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000000c0)={r2, &(0x7f0000000080)=""/7}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r1, 0x0, 0x9, &(0x7f0000000140)='/dev/vcs\x00'}, 0x30) sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x103000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x5, 0xe, 0x800, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x4}, [@generic="a257c0e1d96b60c02397ffc5a810852b4084a02764bf51956d5bf2f430f7b5becb8d92f6d14f34d085e7c955a04a6789c2f95a89ae5b077767aa90815b4e", @typed={0x8, 0x13, @pid=r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0xfffffffffffffc19, 0x143, {0x0}}, 0x10) 03:35:13 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000240)={0x3f}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000e0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:13 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a630842c310e0bdfb5a134a03000000e9b5398d7b4c67a5f238102bb97a72d4f1454fec347ffcedb0cdfcbe3d672f538192cced2ea5"], 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x100, 0x0) connect$llc(r1, &(0x7f0000000080)={0x1a, 0xffff, 0x3, 0x3f, 0x0, 0x6a2d, @random="386a54f1863b"}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x81) 03:35:13 executing program 5: clone(0x80000020008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x5, 0x400000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x8, 0x80000001, 0x0, 0x3f, 0x2}) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x26) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x1f}, r3}, 0x14) ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 589.972564][ T5651] binder: 5649:5651 unknown command 1107845898 [ 589.977164][ T5658] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:13 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)=""/4096) r1 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000000c0)={{0x0, 0x5, 0x2, 0x9, 'syz1\x00'}, 0x5, 0x4, 0x1, r1, 0x3, 0x1, 'syz1\x00', &(0x7f0000000080)=['/dev/infiniband/rdma_cm\x00', 'md5sum\'&GPL]\x00', '/dev/infiniband/rdma_cm\x00'], 0x3d, [], [0x8, 0x2, 0x8, 0x1]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000240)={0xbb, @dev={0xac, 0x14, 0x14, 0x2b}, 0x4e20, 0x2, 'lc\x00', 0x8, 0x6, 0x21}, 0x2c) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0xfe7d, 0x143, {0x0}}, 0x6bd) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000200)) [ 590.020591][ T5648] llc_conn_state_process: llc_conn_service failed [ 590.024472][ T5651] binder: 5649:5651 ioctl c0306201 200005c0 returned -22 [ 590.036213][ T5659] binder: 5654 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 590.036227][ T5659] binder: 5654:5659 ioctl c018620c 200005c0 returned -22 03:35:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000f0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:13 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0xa14a, 0x143, {0x0}}, 0x10) 03:35:13 executing program 5: clone(0x80000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="58cc3cce68f4a9af401e6bb9cd6f0a630840"], 0x0, 0x0, 0x0}) [ 590.203435][ T5861] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:13 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{0x1}, 'port0\x00', 0x1, 0x20, 0x7f, 0x1, 0x8, 0x6, 0x5, 0x0, 0x4, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 590.344113][ T5884] llc_conn_state_process: llc_conn_service failed [ 590.391832][ T5892] binder: 5891:5892 ioctl 40a85321 20000000 returned -22 [ 590.421138][ T5892] binder: BC_ATTEMPT_ACQUIRE not supported [ 590.430551][ T5892] binder: 5891:5892 ioctl c0306201 200005c0 returned -22 03:35:14 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000100000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:14 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x4000) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x90000000, 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000040)={0x0, 0xae, 0x8001, 0x9, 0x1f, 0x100000001, 0x1, 0x9, {0x0, @in6={{0xa, 0x4e22, 0x81, @remote, 0x1}}, 0x4, 0x7, 0x4, 0x10000, 0x7f}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={r2, 0x5aa}, &(0x7f0000000180)=0x8) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) 03:35:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x200, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp, @window={0x3, 0x7, 0x80}, @mss={0x2, 0xff}, @mss={0x2, 0x4}, @mss={0x2, 0xf15}], 0x5) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x4, 0x159000) fcntl$getflags(r0, 0x40b) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000002c0)={0x0, 0x3, 0x1c0000, 0x400000006}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a5d084084d7ddd76609aa2e620069638b9dac1f204034333a8c1ccd97534778bbe51422fe34d1400c723e5d2312871f46f8b7b5d7cba48e698d9bdd1766aad300005626cbbf0bc1b98c0e205c47cd3918666756c2b8317153fe0900932149de46d3cd732929875cd3d07881501a0457764a2e1610021601aeb610241e831dee416a74bc494e61"], 0x0, 0x0, 0x0}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) 03:35:14 executing program 1: clone(0x40000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) r1 = semget$private(0x0, 0x1, 0x20) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/99) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0x78, [], 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000080)=""/120}, &(0x7f00000001c0)=0x78) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="83a8a4db31b72ea0e7722e7c0df518ee49c57a3e169ff88e46302188bc1c5c18cd7a503c798ce3af3304590bff2adc0743025d2ecb3ee949f2fa0ce9039f87eb00bbef91aac6686e19e99e7ca099af145b716d574efcdce13b7ac0d61fad051033fe89828899ca54ed1b288fbc33e11d43ac6994a79af57d72960948eb52138d6bb8dc7f2c6750f6c6063bf79b90f1c9f958d271768bd5d40500000000000000e9301ca88783b7389f41cfcc11d0cd69f85c70ebbb7fac0882e602"], 0x0, 0x0, 0x0}) 03:35:14 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x5, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e20, 0x1, @ipv4={[], [], @broadcast}, 0x9}}, 0x3, 0x4, 0x100000000, 0x5, 0x8}, &(0x7f00000001c0)=0x98) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r3 = fcntl$getown(r2, 0x9) sched_setscheduler(r3, 0x3, &(0x7f0000000200)=0x4) [ 590.717816][ T6114] binder: 6109 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 590.717830][ T6114] binder: 6109:6114 ioctl c018620c 20000000 returned -22 [ 590.720006][ T6113] llc_conn_state_process: llc_conn_service failed [ 590.726801][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000280000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:14 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x8010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x2}, @acquire_done={0x40106309, r1, 0x4}], 0xf6, 0x0, &(0x7f0000000140)="4193520b3afa5bbad37762d75347ca7b0d572511b281536dc88e6d62776167ecce7f389be25d7008461c05e433f34631775a61d6d6f7821ba65175ef9e0a70009efb21d97bdd55e0f16de31acb2215126f1481f4791ee2f055b1a9b9011e473888e22fd7b9e285cf86f89e7793de35460b03eaa956f919712c2ae2c84e0224244019dd5d2ed2d29dba07cfd9913a4e4f4a96f9aabc16b9888b0aef4011cc8f2eb151a9893ea325a4f1f789062b578f5e4e088231609630c635fe046fe55fdf196fa8cb6329a4cf756a54af52b29b857b51e54b38c714f5e41565d7a9d727db0d61dae37ecb674d6b121e22c1444ed269daea45812850"}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:14 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000004c0)={0xc, 0x8, 0x143, {0x0}}, 0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000100)={0x8c8, "49f484ba901449183d4d06cda3c5a75b535407b5f9c4cf71cf00391cfa0ff92b", 0x1000, 0x8, 0x69756650, 0xa, 0x4}) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x100) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000040)=0x8) [ 590.910687][ T6323] binder: 6306:6323 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 590.919505][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:14 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="802a9dc7"], 0x0, 0x0, 0x0}) [ 590.967430][ T6323] binder: 6306:6323 DecRefs 0 refcount change on invalid ref 2 ret -22 03:35:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000480000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 591.007752][ T6323] binder: 6306:6323 BC_ACQUIRE_DONE u0000000000000000 no match [ 591.018482][ T6344] llc_conn_state_process: llc_conn_service failed 03:35:14 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 591.081968][ T6390] binder: 6361:6390 unknown command -946001280 [ 591.118283][ T6390] binder: 6361:6390 ioctl c0306201 200005c0 returned -22 [ 591.179305][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 591.222635][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 591.258977][ T6533] llc_conn_state_process: llc_conn_service failed 03:35:14 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x1000000) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:14 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:14 executing program 5: clone(0x4000003102041ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = getpid() ptrace$getenv(0x4201, r1, 0x100000000, &(0x7f0000000000)) 03:35:14 executing program 1: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xffffffffffffff57, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$getenv(0x4201, r2, 0x66, &(0x7f0000000080)) 03:35:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000004c0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:14 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 591.367323][ T6571] binder: 6567 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 591.367336][ T6571] binder: 6567:6571 ioctl c018620c 200005c0 returned -22 [ 591.432967][ T6580] binder: 6573:6580 ioctl c0306201 20000180 returned -14 [ 591.447131][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 591.475196][ T6582] llc_conn_state_process: llc_conn_service failed 03:35:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000600000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:15 executing program 4: ioperm(0x0, 0x8, 0x3f) 03:35:15 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6f327cc75111db0a6344d6a968e8dfe33e9318b7b6e198b00f29c6adbdbcd822d767f5bd"], 0x0, 0x0, 0x0}) 03:35:15 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:15 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x7f, 0x5, 0x8, &(0x7f0000ffc000/0x1000)=nil, 0x3}) 03:35:15 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x2) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000480)={0xa0}, 0xa0) [ 591.688068][ T6800] binder: 6794 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 591.688081][ T6800] binder: 6794:6800 ioctl c018620c 200005c0 returned -22 [ 591.723146][ T6802] llc_conn_state_process: llc_conn_service failed [ 591.725664][ T6803] binder: BC_ATTEMPT_ACQUIRE not supported [ 591.759330][ T6803] binder: 6799:6803 ioctl c0306201 200005c0 returned -22 03:35:15 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f000000) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000680000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:15 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x20, 0x10201) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:15 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:15 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@bcast, @default, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:15 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 591.980579][ T7026] binder: BC_ATTEMPT_ACQUIRE not supported [ 592.000151][ T7028] llc_conn_state_process: llc_conn_service failed [ 592.007544][ T7023] binder: 7022 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 592.007557][ T7023] binder: 7022:7023 ioctl c018620c 200005c0 returned -22 03:35:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000006c0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 592.034976][ T7026] binder: 7025:7026 ioctl c0306201 200005c0 returned -22 03:35:15 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:15 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x70, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x28, 0x8, &(0x7f0000000100)=[@ptr={0x70742a85, 0x0, &(0x7f00000000c0), 0x1, 0x2, 0x38}], &(0x7f0000000140)=[0x30]}, 0x8}}, @increfs={0x40046304, 0x1}, @acquire_done={0x40106309, r1, 0x2}, @increfs], 0x7c, 0x0, &(0x7f0000000240)="ce3db2615aefc88d96eb235e06ff52b8dd54edcbb4ecba66d3c397bc60bd1211f99c9276480df2069e8900ef87a2cafe4be784e5f0df3f909b6d4d19a5ea3b03d72851a70e7b77f80efd0fbccf636aba00f8d465a705cbd895554c2e25753f05f4f02ccf18df97d772f02b6b6e0078395302822a46f1436a715f4be7"}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x440000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0xd9) 03:35:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000740000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:15 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) ioctl$int_out(r0, 0x2, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x180) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x3, 0xcad, 0x2}, 0x8, 0x7fffffff, 'id0\x00', 'timer1\x00', 0x0, 0x4000000000000000, 0x8001, 0x0, 0x3f}) 03:35:15 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) [ 592.265094][ T7252] llc_conn_state_process: llc_conn_service failed [ 592.292705][ T7256] binder: 7254 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 592.292718][ T7256] binder: 7254:7256 ioctl c018620c 200005c0 returned -22 03:35:16 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x40000000) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:16 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000007a0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:16 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8a, 0x0, &(0x7f0000000040)=ANY=[], 0xffffffffffffff53, 0x0, 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000140)={0x80000000, "c2b4f6356569dc3be5016e0f33d38d37e0c31d3732e5278ce96d6755ad5187e2", 0x3, 0x1, 0x1, 0x0, 0x100}) 03:35:16 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = dup(r0) setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000000)="be371d40ebcdd0bf29d8f3cdf75f2136f7aa84a2405301b4fd282a3350f093f751957f50efb41cf501463e397124e7fc31024674d25eacc516a6b9689ace17e4588da5e7bdea51d56e1875e5dacd013e68aa4ab4d272c15e054aa8a559ca4410bcd5e33909c41978e0f7e282d6c44377df4887a8da57e49df0a469e3b0ca529110aaeb73c9c198f68fc404e0e15b2b14c8e2d7d259618d0f80743817f89157e90102b41edbcaf0254a737053772d755a2bbfb0ec5972c41ece41660a4dc725da175234e017ffa6a9b225eaa6d93b", 0xce) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="b7693f1a68cd4bbf3c12d23c1e4562a68718a9d6fc135cd7015137045c3e40e7628bf3fee658f7a42cd44999c1b95039ec84f0e3e3169ef35ced4e8e999c67cf42035f582a1fcf065a63612cb0b40441caccc64230f1782887bfd34ce35140e9d64c3c6fe7b6414d0e734d18e4d5a492b29cc6938f1f041cb58305cb9bbfa6c3ce40a0b5296c0e6e00"], 0x0, 0x0, 0x0}) [ 592.618274][ T7480] llc_conn_state_process: llc_conn_service failed [ 592.630160][ T7481] binder: 7477 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 592.630173][ T7481] binder: 7477:7481 ioctl c018620c 200005c0 returned -22 [ 592.652111][ T7484] binder: 7475:7484 unknown command 0 03:35:16 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 592.665741][ T7484] binder: 7475:7484 ioctl c0306201 20000000 returned -22 03:35:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000f00000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:16 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x100) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 592.749929][ T7621] llc_conn_state_process: llc_conn_service failed 03:35:16 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:16 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18741d52966eca86860cbec24d00c445324ec4aa962f1ce0786910251c74f088dbc19656fc4c2db26c61a8e9c88591b69ac471431b445792c21e81e24ebfcf7ddb09a11fad0347f50a68c61ca4a7d7528eaeea0c71afe1bd17ee7eefd60470fc43c323ba0f8122af00f432e2ca8e6cd62c33bc364a8c1ef0b94d2262e19a"], 0x0, 0x0, 0x0}) 03:35:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000fb0000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 592.849390][ T7705] binder: 7685 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 592.849403][ T7705] binder: 7685:7705 ioctl c018620c 200005c0 returned -22 03:35:16 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) [ 592.957008][ T7778] binder: 7749:7778 unknown command 1377661976 [ 593.003992][ T7778] binder: 7749:7778 ioctl c0306201 200005c0 returned -22 03:35:16 executing program 5: clone(0x4000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0xffffffffffffffed, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a63f53f"], 0x360, 0x0, 0x0}) 03:35:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000300421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:16 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0xfdfdffff) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:16 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200402, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="a0c7299c"], 0xfffffffffffffe20, 0x0, 0x0}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x5, 0x280) r3 = semget$private(0x0, 0x3, 0x200) semop(r3, &(0x7f0000000280)=[{0x0, 0x1, 0x1000}, {0x7, 0x20, 0x800}, {0x4, 0x6fa7, 0x1800}, {0x0, 0xffffffff, 0x800}, {0x3, 0x1000, 0x800}, {0x1, 0x81}], 0x6) link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x10001, @rand_addr="e780685c4e70ad1309913c44b2d99cde", 0x20}, 0x1c) 03:35:16 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 593.280137][ T7988] binder: 7983:7988 unknown command -1674983520 03:35:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000500421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 593.326637][ T7988] binder: 7983:7988 ioctl c0306201 200005c0 returned -22 03:35:16 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:17 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x501000, 0x0) connect$netrom(r1, &(0x7f00000003c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 03:35:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000600421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:17 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 593.558917][ T8211] binder: 8208 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 593.558931][ T8211] binder: 8208:8211 ioctl c018620c 200005c0 returned -22 [ 593.588155][ T8232] binder: BC_ATTEMPT_ACQUIRE not supported 03:35:17 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) [ 593.607050][ T8232] binder: 8214:8232 ioctl c0306201 200005c0 returned -22 03:35:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000700421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:17 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:17 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:17 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0xa0400) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x1, r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a630840c82e9dc5b8978372181eb34d83db5a1a7b5f3e8ecc9525fed04575bcc2f13f408524188acf5f97148fa908896542e8dd87bf706bf5abda71fe76b78e322824c9d1712e35b2c2882b28f80f0f714a41d9df15534156e88b9ca0d42507"], 0x0, 0x0, 0x0}) [ 593.772864][ T8440] binder: 8436:8440 ioctl c018620c 200005c0 returned -22 03:35:17 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0xfffffdfd) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000a00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 593.887929][ T8503] binder: BC_ATTEMPT_ACQUIRE not supported 03:35:17 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000000)="8d666c3bed578e918401912bb6a70b6648db8338ad30aa45c26978e5e5b450c4bbb952795da166a41f0d38900b58186877237f3c7249004db7c9799dfa6b", 0x3e, 0x3b) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:17 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 593.919394][ T8503] binder: 8459:8503 ioctl c0306201 200005c0 returned -22 [ 594.023627][ T8586] binder: 8565:8586 ioctl c018620c 200005c0 returned -22 03:35:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000c00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:17 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:17 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 594.183100][ T8797] binder: BC_ATTEMPT_ACQUIRE not supported 03:35:17 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) 03:35:17 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1545, 0x101) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1a24, @loopback, 0x9}, {0xa, 0x4e21, 0x9, @mcast1, 0x7}, r1, 0x1}}, 0x48) 03:35:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000e00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 594.226506][ T8797] binder: 8793:8797 ioctl c0306201 200005c0 returned -22 03:35:17 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:17 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x210000, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='r\x8az7\x00') clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 594.403394][ T8993] __nla_parse: 16 callbacks suppressed [ 594.403403][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 594.434549][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 594.487045][ T9079] binder: BC_ATTEMPT_ACQUIRE not supported [ 594.496197][ T9079] binder: 9022:9079 ioctl c0306201 200005c0 returned -22 03:35:18 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x100000000000000) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:18 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000000)={0x37e, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x1b7, 0x0, 0x0}) 03:35:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000c00e00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:18 executing program 3: syz_open_dev$video(0x0, 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:18 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0xfffffffffffffffb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x401, 0x8, '9P2000.u'}, 0x15) 03:35:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000f00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 594.642196][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 594.648744][ T9236] binder: 9232:9236 ioctl c018620c 20000000 returned -22 03:35:18 executing program 3: syz_open_dev$video(0x0, 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 594.769737][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:18 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) 03:35:18 executing program 5: clone(0x8000808000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) accept4$netrom(r1, &(0x7f0000000040)={{0x3, @netrom}, [@remote, @netrom, @remote, @netrom, @default, @remote, @null, @default]}, &(0x7f00000000c0)=0x48, 0x800) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000002000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:18 executing program 3: syz_open_dev$video(0x0, 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:18 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a63c616"], 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x3, &(0x7f0000000080)=[{&(0x7f0000000140)="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", 0xfd, 0x6}, {&(0x7f0000000240)="8a9350c58b5274c46847ff52b73d7b9b973d35c682ca4a34c44dd5f4ccd6073ecd9af7001fd3ca7fb307f66688e8a0cbac4acb8adb62a2b0dc51eaf5a7631aadec9aaeea9372a2eb34b0ed7785b006af43301712da6b44b2eb5d3aa1fb4b9101a26f7d5152057fd4cca1bb5e57cbb8b0e7976458ac4972d08754265bd4d78e60ded839da39d8a9a9aa279b41f19883d5b135af03c398fdabb4c8c4114dbbd1433fe065423666bda23bda75b09b9743eb212bc483209436f84a2c06badfb91422799163304d1c69ad3a9b6a809c28060854e089ac6460e9e69a4e", 0xda, 0x6}, {&(0x7f0000000340)="24b66cbd6f28f70e55d19fa14329339fdcb8dcdc873de8387d49a5fd13529b6acb89c2394c872c924ff3ebae1de41f8ff0a559f87e25bfe02da125b48f280793456fd3f75cec65862489004d4db466274326c6d0c9e1d6ff47fdaf15b72bae24301f56ad22dfc94424d73b4b940f2eab1af89e575759e657e6adc0497858e2c5b5e26261f6d29d529111f966f54a787b61942e1cc3d573d09be8dfe0a0f79ded93f06e8ed95f6019280411434d2437f489dc816f04e67ab40a07c6ce6c04f823afeea0a09e9c1a1409055d1b313cbc71d760e474f9248cdf3ea6b5dff9d5dc5b229a45c75357d287228d", 0xea, 0x1}], 0x800002, &(0x7f0000000440)={[{@nobarrier='nobarrier'}, {@session={'session', 0x3d, 0x7}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "e24b1486"}}, {@session={'session', 0x3d, 0xfff}}], [{@obj_user={'obj_user', 0x3d, 'md5sum'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, '/dev/binder#\x00'}}, {@fsname={'fsname', 0x3d, '/dev/binder#\x00'}}]}) [ 595.019774][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 595.034472][ T9499] binder: 9488:9499 unknown command 382100234 [ 595.049770][ T9499] binder: 9488:9499 ioctl c0306201 200005c0 returned -22 [ 595.059842][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 595.083652][ T9499] hfsplus: unable to parse mount options 03:35:18 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00000000000000) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000002800421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:18 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:18 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:18 executing program 1: clone(0x40000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 595.292174][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 595.318925][ T9718] binder_ioctl_get_node_info_for_ref: 3 callbacks suppressed [ 595.318933][ T9718] binder: 9711 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 595.318945][ T9718] binder: 9711:9718 ioctl c018620c 200005c0 returned -22 03:35:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000003f00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:18 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 595.427945][ T9767] IPVS: ftp: loaded support on port[0] = 21 03:35:19 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) 03:35:19 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a910600"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x10080, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast1, 0x0}, &(0x7f0000000080)=0xc) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @remote}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x6000, 0x0) [ 595.475634][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:19 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 595.567495][ T9886] binder: 9866 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 595.567509][ T9886] binder: 9866:9886 ioctl c018620c 200005c0 returned -22 03:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000004800421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:19 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x0}, r2) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xaa, 0x40080) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r4, @ANYBLOB="00082bbd7000fbdbdf25140000003c0005000800010065746800080001007564700008000100696200000c000200080001000d00000014000200080004000600000008000200030000005000050008000100010000000000000008000300ab0a0000080003000100000008000300ffffff7f080004000002000608000200c403000016f99cdcac6594493708000200b60f000008000400000200052bb0faf30419bd632309ac1383c44a0496eb017413f7d3bb5a971132262334d8fde870e0399880bd97752a84354610e2b3"], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x81) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 595.715054][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 595.807055][T10070] binder: 10066 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 595.807067][T10070] binder: 10066:10070 ioctl c018620c 200005c0 returned -22 03:35:19 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x4000000000000000) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:19 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x1, 0x81, 0xbe3, 0x30, 0x1, 0x80000001}, 0x2c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000004c00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:19 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:19 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x100000001, 0x40000) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x5, 0x20, 0x401, 0xd3eb}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e23, 0x1, @rand_addr="dbd872f268038c7b58b4e6cc1cc6d98e"}}, [0xfffffffffffffff8, 0x8, 0x9, 0x1ff, 0xf83, 0xfffffffffffffff7, 0x4, 0x8, 0x6, 0x86, 0x798, 0x0, 0x6, 0x401, 0x7]}, &(0x7f00000000c0)=0x100) clone(0x8e0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 595.933860][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 595.960464][T10185] binder: BC_ATTEMPT_ACQUIRE not supported [ 595.982580][T10185] binder: 10181:10185 ioctl c0306201 200005c0 returned -22 03:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000655800421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:19 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:19 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:19 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7, @mcast1, 0x3}, {0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x27}, 0x1000}, r1, 0x9}}, 0x48) clone(0x2000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a630840fce084f1cb1bc22d563964fdc414ef20fb7c652dab2b96eb2786decf6e3418127262b402e643897bc70170c8816ba3e7b81dccd0318a3bb1031eac755dfa2fd2a2736ff412f01b"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xff, 0x300) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000000c0)) 03:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000006000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:19 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:19 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c26ffb5600a4545a61ea588d110d1e17051eabf1"], 0x0, 0x0, 0x0}) [ 596.429841][T10466] binder: 10446 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 596.429853][T10466] binder: 10446:10466 ioctl c018620c 200005c0 returned -22 03:35:20 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0xfdfdffff00000000) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000586500421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:20 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:20 executing program 1: clone(0xc000403102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000140)="2ffd8a6756d802178afcefce7bedf426cca8358fce73c11910b2bb7528d42c84d45b5c3939327de3bd43d079771628f32f90d4060fcbeeb0face60893f6940848ca62bca41cac74ef84701d862cb05cfb6e2fd0c9c23c0df83a219894811f6f325ae40c01c4575bf689f8b167a7d9d77349651632d0921ee9a3d072bbfc1b0c0f0e0b21e3b43ed7f9e16edf21464ecce3af57e9e16bcc4d19db748b06d4105ac853bf894aafcae20b471b98feb7314d68b1d1be9da48a766a9270a71f74f9cdd3fb4efb2d905431b44f3d4f64ac6e8c39f61d6f2a23794ceb66317dc23cc6e5b81a04735cd93") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000080)=0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x6, 0x2, 0xdd5, 0xffffffffffffffff, 0x400, 0x7}) prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffff9) 03:35:20 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:20 executing program 5: clone(0x100c0200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x10000}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a630840dfc5b7febd0e60951893b4876d07000000005797015158eca9abd702bf8c98d3dbee22f0cc4bde8d0ea88afbbd22ac8b9af2d2cd646cb78ab48dd937cf78ef520c8d39b32b83bdd25e4c067c1ba6ac88ef33c7e82f12de51bfd7133c197476c3f2012530b24968f25d41e663f001fb83d0cbe56302592f"], 0x0, 0x0, 0x0}) 03:35:20 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(0xffffffffffffffff, 0x800020c0045002, &(0x7f0000000040)) [ 596.673273][T10655] binder: 10628 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 596.673286][T10655] binder: 10628:10655 ioctl c018620c 200005c0 returned -22 03:35:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000006800421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:20 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:20 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x0]}, 0x6) rt_sigreturn() r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x20000000002) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:20 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(0xffffffffffffffff, 0x800020c0045002, &(0x7f0000000040)) 03:35:20 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x80000001) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 597.071508][T10868] binder: 10865 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 597.071521][T10868] binder: 10865:10868 ioctl c018620c 20000040 returned -22 03:35:20 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0xffffffff00000000) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000006c00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:20 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000380)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000480)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000640)=0xe8) fstat(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x3, &(0x7f0000000300)=[{&(0x7f0000000140)="f219d7ba370d61733db09396377bb666ceeac9bb2e2fc6510bdf32769c576449d675d3bb7695449fb84eacdf15d3f391460db4c830df509bb22bd6d8c33f25b2b45e9014216d73dcd87798fd320f70868ed20a4431d94ececa2140e86c3a83ab05e0d14dc9957eef2e752723017faebc3051f1bf4aa23f6d0ee29929a9aca8b6f9e4504a20de00f4192931855cc2f465abed32e2e09e31e4f274939c538667715ad5f102e9fb195ddea3af362e99f0235f3a1eae35798ad5818e17b8ab52fe8cc4f0557e4e259ca21b3a855aefea1470cc64270225b773", 0xd7, 0xeb}, {&(0x7f0000000080)="4666bc53591b9cf987d42be33f54e5630a9f52571d094dfc944a8454f969b8a0a90689f2c8bbeb2356d061e343b00feceeafdda858ef5511e07eb5401c72744b11cb98ea70a0e8553d7ff30901b9734e241f1d3a659ea0b59608eb8a1ec9c2a66b4c50cf0d24b446e57913997725161754", 0x71, 0xfd}, {&(0x7f0000000240)="e5f47fd357a654226fbf214c5112ff91fc9ffe228fa56eeab87ead3528bb0838560413793b2f8e784152a8ce4c7e9dc20c1abf56ae6a0239eebb688fe18e12ea1a3e3faa281afb21c478ebe70e4f9de6fa7732b6481833fe5f5f749ae1bd2482e1cda1e098e6f902ae9dfeeff2d558c308c5d6faf50adbf786388e73c3d7e07bcb9f19c6c88ee196341378948213056883d2154c096ee56592759c3d822980cad334ff5c", 0xa4, 0x7}], 0x1000000, &(0x7f00000007c0)={[{@notail='notail'}, {@grpjquota='grpjquota'}, {@grpjquota='grpjquota'}, {@hash_tea='hash=tea'}, {@resize={'resize', 0x3d, 0x7fffffff}}, {@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation'}, {@resize_auto='resize=auto'}, {@noquota='noquota'}], [{@uid_gt={'uid>', r1}}, {@uid_lt={'uid<', r2}}, {@euid_lt={'euid<', r3}}, {@appraise_type='appraise_type=imasig'}, {@fowner_eq={'fowner', 0x3d, r4}}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) fstat(r0, &(0x7f0000000900)) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r5, &(0x7f0000000040), 0x0}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a63ac40de9eefe89e5df2310898f7"], 0x0, 0x0, 0x0}) 03:35:20 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:20 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(0xffffffffffffffff, 0x800020c0045002, &(0x7f0000000040)) 03:35:20 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x3) [ 597.304049][T10980] binder: 10977 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 597.304068][T10980] binder: 10977:10980 ioctl c018620c 20000080 returned -22 03:35:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000007400421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:20 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) [ 597.356916][T10987] REISERFS warning (device loop1): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument [ 597.356916][T10987] 03:35:20 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:21 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) bind$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x7, 0x101, 0x220, "7602382dbf42cd055f48ca8bace7f3846a66a1b3a1b80eab78cf6b2bdf5c22c9b2fd2abe85e841b0a3dbdf576bab4fbee240d33875c3d904dafeeb7722c65e", 0x30}, 0x60) 03:35:21 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:21 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) clock_gettime(0x5, &(0x7f0000000000)) [ 597.698210][T11215] binder: BC_ATTEMPT_ACQUIRE not supported [ 597.704080][T11215] binder: 11214:11215 ioctl c0306201 200005c0 returned -22 [ 597.713051][T11218] binder: 11212 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 597.713063][T11218] binder: 11212:11218 ioctl c018620c 200005c0 returned -22 03:35:21 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000100)) 03:35:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000007a00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:21 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:21 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:21 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x400000000003) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1b58, 0x200000) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x3, 0x40d, 0xfffffffffffffffe, 0x8}, 0xfffffffffffffdac) 03:35:21 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000140)=""/117) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x18, 0x47fd) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x6) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0xa42}]}) [ 597.988790][T11455] binder: 11445 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 597.988805][T11455] binder: 11445:11455 ioctl c018620c 200005c0 returned -22 03:35:21 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:21 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000008100421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 598.110806][T11495] binder: BC_ATTEMPT_ACQUIRE not supported [ 598.194279][T11495] binder: 11458:11495 ioctl c0306201 200005c0 returned -22 03:35:21 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:21 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:21 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 598.416582][T11686] binder: 11674 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 598.416596][T11686] binder: 11674:11686 ioctl c018620c 200005c0 returned -22 03:35:22 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) fcntl$getflags(r0, 0x401) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045042, &(0x7f0000000040)) 03:35:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000ec000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:22 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, 0xfffffffffffffffe, 0x20000, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) msgget(0x2, 0x101) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={r1, r1, 0x287cf1402b841efa}, 0x10) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x400) getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 03:35:22 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:22 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000f000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:22 executing program 5: clone(0x820161ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x100000001, 0x101040) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x6, 0x6c204179, 0x2, 0x7, 0x6, 0x400, 0x5, 0x80, 0x1000, 0x3ff, 0x1, 0x80}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) [ 598.718818][T11803] binder: 11800:11803 unknown command -352203713 03:35:22 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) [ 598.777669][T11803] binder: 11800:11803 ioctl c0306201 200005c0 returned -22 03:35:22 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:22 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:22 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000fb00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:22 executing program 2: r0 = inotify_init1(0x800) ioctl$int_in(r0, 0x5473, &(0x7f0000000080)=0x401) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0x8) ioctl$int_in(r1, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r1, 0x800020c0045002, &(0x7f0000000040)) 03:35:22 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x101000) bind$ax25(r1, &(0x7f0000000040)={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @null]}, 0x48) 03:35:22 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:22 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xd0000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') tee(r1, r0, 0x1, 0x8) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60010000", @ANYRES16=r2, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x20008090}, 0x20000080) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() chown(&(0x7f0000000480)='./file0\x00', r3, r4) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x246900, 0x0) recvfrom$ax25(r5, &(0x7f0000000340)=""/152, 0x98, 0x0, &(0x7f0000000400)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default]}, 0x48) 03:35:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000000671ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:22 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 599.387015][T12054] binder: BC_ATTEMPT_ACQUIRE not supported [ 599.408186][T12052] binder: 12043:12052 ioctl c018620c 200005c0 returned -22 [ 599.413715][T12054] binder: 12049:12054 ioctl c0306201 200005c0 returned -22 03:35:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000200421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:23 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:23 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:23 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="486c6a244289d68f3880182eb4095a12542331e27fe3b2793c15eabfe984d66880eb019301aa79d5e596812dbd4e9643ccfe50755855f8ca7125a93de351a1347b074be0616f8ae48c1e5a9f04fb4e354eb7ddabb8f8ffffffffffffffb6546c9dc8f36238b3a9373ffc7ed4464198e1f4956609cbdf8fc5edc0115d84e7121533a306f7af0e9f73fe1ff48428e352f5f300e6a5d9f39a9615c6c01b04f81ce821b0dc9ebe434a4d"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x101000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x2, @mcast1, 0xfffffffffffffffb}}, 0x1, 0x4, 0x25e5, 0x8, 0x10}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}, [0xee, 0x5, 0x7, 0x6, 0x7, 0xfff, 0x9, 0x0, 0x7fffffff, 0xfffffffffffff800, 0x81, 0x2, 0x9, 0x9, 0x3]}, &(0x7f0000000280)=0x100) 03:35:23 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 599.667580][T12270] __nla_parse: 13 callbacks suppressed [ 599.667591][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:23 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 599.783937][T12276] binder: 12274:12276 unknown command 610954312 [ 599.814535][T12276] binder: 12274:12276 ioctl c0306201 200005c0 returned -22 [ 599.825628][T12281] binder: 12279:12281 ioctl c018620c 200005c0 returned -22 03:35:23 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000080)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:23 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000300421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:23 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:23 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fchmod(r0, 0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 600.077602][T12493] binder: 12489:12493 ioctl c018620c 200005c0 returned -22 [ 600.080923][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 600.095067][T12497] binder: BC_ATTEMPT_ACQUIRE not supported [ 600.122624][T12497] binder: 12490:12497 ioctl c0306201 200005c0 returned -22 03:35:23 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000400421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:23 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:23 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a550840331f5606ae7680f1adfe74a10d4a77b9952ee78eb4312bb6bfc4fd6c1da94207b2c8c5347ff8920f152b7b8507b484330fd8c59176d45c1b62967a6530cb"], 0x0, 0x0, 0x0}) 03:35:23 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a630840efe80310eb732a6ac72e67bcec8363e884bad50445c05ca89d64f64382645e40562d131809e0b02f99e62ee6428f21b7e403edeafee498753b55399d062ec9b7c0236b00000000f367"], 0x0, 0x0, 0x0}) [ 600.308994][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000500421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:23 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 600.392926][T12725] binder_ioctl_get_node_info_for_ref: 3 callbacks suppressed [ 600.392935][T12725] binder: 12722 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 600.392947][T12725] binder: 12722:12725 ioctl c018620c 200005c0 returned -22 [ 600.422622][T12727] binder: 12724:12727 unknown command 1074287882 [ 600.464417][T12727] binder: 12724:12727 ioctl c0306201 200005c0 returned -22 [ 600.505069][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:24 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) read$eventfd(r0, &(0x7f0000000200), 0xfffffffffffffeea) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x1010, r0, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:24 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000600421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:24 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) 03:35:24 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa00, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000040)="dc70edce9f8a5f0013e4144f365a1c4dab8807a975b114ea1f10ddf360a8438c3e59f2ec23216534c1348a1561e0d59d494252af76390922388b8e7ecbd56f52a30c667b75151e992e3fe921b88aef32fffe5618e727d56dd545ff2770bbd67fa8", &(0x7f0000000140)="fc2600385d338a68703da7eb38ddc277f76db216e483da955e79db5a1650e2476030eab55c13079545ea0f6da9bc99ca19fa3113125b2f460d44d307d6411dfb9cd0b8fa"}, 0xe) [ 600.724397][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 600.737896][T12952] binder: 12947 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 600.737910][T12952] binder: 12947:12952 ioctl c018620c 200005c0 returned -22 [ 600.749573][T12954] binder: BC_ATTEMPT_ACQUIRE not supported [ 600.799647][T12954] binder: 12950:12954 ioctl c0306201 200005c0 returned -22 03:35:24 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:24 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000700421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:24 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x9}, 0xfffffffffffffe5a) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x1, r1, 0x10, 0x0, @ib={0x1b, 0x8, 0xfffffffffffffff7, {"40f8e55994071059c9b71489fe73ba93"}, 0x9, 0x8, 0x3}}}, 0xa0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:24 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xa0400, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) gettid() ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 600.951774][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:24 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:24 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="fd5310a7cd9f261f8cc0b5e0240b1197d598f31b9f88c2cbbb7b10071bbba2ec3ff83506ffbadc8c7b5e603a48942f71cf5f2101718836f81ccf4a18990e7fd5f507cc94276f9849f9f3cd94a288b8d0ca917f05ea4d72fc66be20d9d69f9c5d7a1e811d0eecca60c19edd44fc294c1e9fa46549dd150fa26da31965bc73408733426b233bc2ec05f77de760c6a2cbb3f4c87549fa76a50a8e73689daaf68d158440bcdc2364cad38e8d4e833beff3bc2a0d3571d82cc70986a45354095a1550de68be4213f46d500cdf3f52b2a8b0da4f917ec1ed0a46d3c0f141de6999efcb620a862962794ea14132de2ee5dc28768690a5d791153abdf5f5b304f04d79a11abdcae2708c837abd185708c3b6c1d6fb2b7ef92a712c5360dfdd324ab43f63431079e9b8f1dd10abd1640eb1c986dc6f44012f4be841cc26045dff49c4c43f9af273ea3d69764a11bf284c8d3598cdfb451686b96ec8121e8878c446598121b6533bcf68c3a1a7cedf6b4b3c06538571a3e42b7a085da5aa298a68717fde91e70447d3419b1757bb5a95de3ab07f8590d578b7b6d305a568a9a2b93248e86655c1377c8a6c2b182be620927a6da71c8304c757a5737b813bf6e3a4c47c392e85fcba71ed379afe7196f2ad751af2c368f3"], 0x0, 0x0, 0x0}) [ 601.058481][T13178] binder: 13174 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 601.058494][T13178] binder: 13174:13178 ioctl c018620c 200005c0 returned -22 03:35:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000800421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 601.150214][T13213] binder: 13198:13213 unknown command -1492102147 [ 601.174256][T13213] binder: 13198:13213 ioctl c0306201 200005c0 returned -22 03:35:24 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:24 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 601.225609][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000a00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:24 executing program 1: clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 601.329961][T13394] binder: 13355 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 601.329975][T13394] binder: 13355:13394 ioctl c018620c 200005c0 returned -22 [ 601.447019][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:25 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x0, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:25 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:25 executing program 5: clone(0x80000020008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x5, 0x400000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x8, 0x80000001, 0x0, 0x3f, 0x2}) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x26) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x1f}, r3}, 0x14) ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 03:35:25 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000c00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:25 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KDDELIO(r0, 0x4b35, 0x7952) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 601.659762][T13576] binder: 13556 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 601.659775][T13576] binder: 13556:13576 ioctl c018620c 200005c0 returned -22 03:35:25 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 601.725646][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:25 executing program 5: clone(0x80000020008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x5, 0x400000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x8, 0x80000001, 0x0, 0x3f, 0x2}) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x26) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x1f}, r3}, 0x14) ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 03:35:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000e00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 601.768175][T13626] binder: 13625:13626 unknown command 0 [ 601.779668][T13626] binder: 13625:13626 ioctl c0306201 200005c0 returned -22 03:35:25 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) ptrace$peekuser(0x3, r1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) clone(0x8003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lookup_dcookie(0x1000, &(0x7f0000000140)=""/152, 0x98) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:25 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) [ 601.914353][T13714] binder: 13673 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 601.914367][T13714] binder: 13673:13714 ioctl c018620c 200005c0 returned -22 [ 601.924060][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:25 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c020660b, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:25 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x0, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000f00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:25 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:25 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x200, 0x10001, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e22, 0x3f8000000, @mcast1, 0xcf3}}, 0x200, 0x8}, &(0x7f0000000280)=0x90) getsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000080), &(0x7f00000002c0)=0x4) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000300)={0x0, 0x0, {0x6, 0x5, 0x1000000081, 0x3}}) listen(r0, 0xffffffffffff6b84) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000001000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:25 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) write$P9_RSTAT(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="4d000000e9f4a2bacebd6954fc8429c531cd7d02001f004600060009000000780400000000000000000000000000800100080000020000000001000000010000000000002f6465762f62696e64"], 0x4d) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) flock(r0, 0x4) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c) 03:35:25 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:25 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c020660b, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000002800421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 602.451555][T13972] binder: BC_ATTEMPT_ACQUIRE not supported [ 602.468285][T13972] binder: 13970:13972 ioctl c0306201 200005c0 returned -22 03:35:26 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c020660b, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000004800421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:26 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x101001) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40) inotify_rm_watch(r0, r1) clone(0x10200800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@remote}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000080)=0xe8) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r3, 0x210, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x159a327d}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 602.723832][T14312] binder: BC_ATTEMPT_ACQUIRE not supported [ 602.731350][T14312] binder: 14296:14312 ioctl c0306201 200005c0 returned -22 03:35:26 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x0, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:26 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 03:35:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000004c00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:26 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000080)) 03:35:26 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000240)={0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:26 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 03:35:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000006000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:26 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="544f85ab9d2f64bc0738db8329d83afcf1e966be624ffcb9c281f4e61b5fe62836e87cca986792ce0ed6dba217d5c181d1480399e94d1f7db2209580e593d3cce2fe0ddb6f20898f9b1f090ede102e7efd81a3121712b9502006aec495be634a62270fbc55ed73cf33089ddcc2cb70ce412bfed94d2d1b8ffe0b773527f14d45c138c618b49f9fdc5b6eb372881b475eb078493f77dd"], 0x0, 0x0, 0x0}) 03:35:26 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) [ 603.127676][T14521] binder: 14513:14521 unknown command -1417326764 [ 603.134214][T14521] binder: 14513:14521 ioctl c0306201 200005c0 returned -22 03:35:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000006800421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:26 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000240)={0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:26 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 603.368169][T14640] binder: BC_ATTEMPT_ACQUIRE not supported [ 603.383924][T14640] binder: 14639:14640 ioctl c0306201 200005c0 returned -22 03:35:26 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, 0x0) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000006c00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:26 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:27 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x4a, 0x1, 0x100000001, "a6e5b154cdeb4932c4d30c6101735413", "65bf8f18704951b3394d00a32ab5269caab5784f15fb10fd92040359ce27ed5587f9cbde72a836405bf62675ec4cb5405a97a45703"}, 0x4a, 0x2) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000007400421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:27 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x40, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)='net/ip_vs_stats\x00', 0xffffffffffffffff}, 0x30) mq_notify(r0, &(0x7f0000000400)={0x0, 0xb, 0x4, @tid=r1}) r2 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x400) connect$vsock_dgram(r2, &(0x7f0000000300)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000200)=0x80) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_vs_stats\x00') ppoll(&(0x7f0000000140)=[{r3, 0x1c0}, {r4, 0x9}], 0x2, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)={0x8}, 0x8) r5 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@md5={0x1, "ec50870a8c5748ae1aa2471dade31eea"}, 0x11, 0x1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) read$FUSE(r4, &(0x7f0000000640), 0x1000) 03:35:27 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000240)={0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:27 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000007a00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 603.758508][T14764] binder: BC_ATTEMPT_ACQUIRE not supported [ 603.771435][T14764] binder: 14760:14764 ioctl c0306201 200005c0 returned -22 03:35:27 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:27 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="e369bef2d100040000fb0abba198e308ba088e634842"], 0x0, 0x0, 0x0}) 03:35:27 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x0, 0x4, 0x3, 0x7f, @local}, 0x10) [ 603.970096][T14982] binder: 14981:14982 unknown command -222402077 [ 603.981340][T14982] binder: 14981:14982 ioctl c0306201 200005c0 returned -22 03:35:27 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, 0x0) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000f000421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:27 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000240)={0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) 03:35:27 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x0, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000fb00421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:27 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nC\b@'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) 03:35:27 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0074e0eb7f00fedbdf250100000000000000c0638eb1cf7135839c137674eb4d7a0b0000000001000100000000000000000000000000000000b9c97e8c0d60744a00e3f1b2e07192062e2f2e62f6377fe41631a50446691a94d842c0d15c93a246a39166c660dfc8a2d83b"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 03:35:27 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000240)={0x3f}) 03:35:28 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x0, 0x4, 0x3, 0x7f, @local}, 0x10) [ 604.442998][T15111] binder: 15107:15111 unknown command 1074283274 [ 604.456367][T15111] binder: 15107:15111 ioctl c0306201 200005c0 returned -22 03:35:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000003421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:28 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) 03:35:28 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x0, 0x3, 0x7f, @local}, 0x10) 03:35:28 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\nc\b@'], 0x141, 0x0, 0x0}) 03:35:28 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, 0x0) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000005421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:28 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) [ 604.784559][T15241] binder: BC_ATTEMPT_ACQUIRE not supported [ 604.788355][T15239] __nla_parse: 15 callbacks suppressed [ 604.788365][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 604.795314][T15241] binder: 15238:15241 ioctl c0306201 20000040 returned -22 03:35:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000006421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:28 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x0, 0x3, 0x7f, @local}, 0x10) [ 604.970185][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:28 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000001c0)={{0x3, 0x7, 0xcdb, 0x5, 'syz1\x00', 0x4}, 0x1, [0x3e, 0x6, 0x0, 0x5, 0x0, 0x5, 0x80000000, 0x8, 0x1, 0xd0, 0x80000001, 0x0, 0x2, 0xd7cb, 0x7, 0x1, 0x5, 0x7, 0xa64, 0x1, 0x8, 0x2, 0x4, 0x100000001, 0x400, 0x4, 0x8, 0x2b, 0x7, 0x4, 0x7, 0x3, 0x80000000, 0x40, 0x1, 0x7, 0x4, 0x7, 0x4, 0x0, 0xff, 0xc902, 0x1, 0x43594ad3, 0x1cf0, 0x2, 0x6, 0x9, 0x3f, 0x6, 0x4, 0x1, 0xfff, 0x3, 0x4, 0x1, 0x2b1, 0x6, 0x6, 0xb7b, 0x4, 0x1ff, 0x8bf2, 0x6, 0x0, 0x1, 0x2, 0x1000, 0x4, 0x0, 0x7fff, 0x100000001, 0x3, 0x9, 0x1, 0x0, 0x7, 0x10001, 0x81, 0x1000, 0x80000000, 0x1, 0x6, 0x1, 0x2, 0x8, 0x100000001, 0x3, 0x80, 0x437, 0x1, 0x4, 0x4, 0x3, 0x5, 0xf00, 0xd9, 0x401, 0xff, 0xfd8, 0x9, 0x0, 0x0, 0xffffffffffff4217, 0x4, 0x6, 0x4, 0x9, 0xde7e, 0x4, 0x7, 0xeb5c, 0x8000, 0x6, 0x81, 0x2, 0x8, 0x100, 0x3f, 0x717b, 0x4, 0x7, 0x20, 0x0, 0x8, 0x6, 0x2], {0x0, 0x1c9c380}}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)={0x8, 0x10001, 0x67}) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(0xffffffffffffffff, 0x800020c0045002, &(0x7f0000000040)) 03:35:28 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2}) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:28 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000040)={{0x8, 0x7fff, 0x1d9, 0x3ff, 0x3ff, 0x2}, 0x4, 0x2, 0x8, 0x2, 0x100, "e37ee1deb61376063a0c9cacaf02cc0080e97b702846fca49b2b4f6968d855177c6b826a3d0c9e7c4bb2a1b137755b1dc89edc472b54c7df477054c4852bf4bed6a0a842cd13018f4b0681e52b0f364f53c2a0e557e1355aa944eecc1c745b4f4ef3879ec40eda6800c51a958a8ee364ee86898d125fa4f9f903fffa146d778e"}) 03:35:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000007421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:28 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x0, 0x3, 0x7f, @local}, 0x10) [ 605.135808][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 605.153890][T15368] binder: BC_ATTEMPT_ACQUIRE not supported [ 605.171507][T15368] binder: 15363:15368 ioctl c0306201 200005c0 returned -22 03:35:28 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x80000, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@nodevmap='nodevmap'}], [{@smackfshat={'smackfshat', 0x3d, 'posix_acl_access'}}]}}) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) sendfile(r0, r0, 0x0, 0x94f) 03:35:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000000a421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 605.309670][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:28 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:28 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x0, 0x7f, @local}, 0x10) 03:35:28 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:28 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7e042c631df04dafcb7289944106ee7f4e95ba43d8c96783f095a4960aa34039b593027897227f90bb115835b1290c09535e7aa98903edcf3651a55ed0469f675de4ebebf64bda84ab770e04e89cb2e7960fed9edfaa41bc52490b5b92ab2653c437128359811bf2f0c518bcc531e248652dec66028328dc0226e00ffc69dbae0ca164e80afc5cf9214f6ee0cfc6a6d9100d4170adaaf38a5ccd3462ac"], 0x0, 0x0, 0x0}) 03:35:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000000c421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:29 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x0, 0x7f, @local}, 0x10) 03:35:29 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) [ 605.479305][T15500] binder: 15497:15500 unknown command 1663829118 [ 605.490996][T15500] binder: 15497:15500 ioctl c0306201 200005c0 returned -22 [ 605.498598][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000000e421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:29 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x0, 0x7f, @local}, 0x10) 03:35:29 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) [ 605.683788][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:29 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:29 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a632600000000084094f70f7648a2582508927bcccc7ddb4c1c42bf10b6b626e26258a95476b090b720e811b0b57e17a5e19f377ff932ece85e9c5a85d1a86efffb77c6bad4b76ebeca84ce4ba7d28a1f9cd34b4243965e945863742c57c4ff6f169a5052c41874c3cc61c3c15214531f6d968e2f6e7f34fb8747632447c73e0a32a82f69c0bf7064f64982994b03717ebdbacb199b"], 0x0, 0x0, 0x0}) [ 605.883116][T15629] binder: 15628:15629 unknown command 2515722 [ 605.892967][T15629] binder: 15628:15629 ioctl c0306201 200005c0 returned -22 03:35:29 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000c00e421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:29 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x0, @local}, 0x10) 03:35:29 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:29 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0xfffffffffffffffb, 0x4) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 03:35:29 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x0, @local}, 0x10) 03:35:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000000f421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 606.039268][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:29 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:29 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 606.152655][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:29 executing program 3: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x0, @local}, 0x10) [ 606.217899][T15865] binder: BC_ATTEMPT_ACQUIRE not supported [ 606.244762][T15865] binder: 15864:15865 ioctl c0306201 200005c0 returned -22 03:35:29 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x2b4) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000020421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 606.478487][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:30 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000680)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x10}, 0x7}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x400}, r1}}, 0x48) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000580)={0x5, 0x2, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x50000) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xffffffff, 0xffffffffffffffff, 0x6, 0x9, 0x0, 0xca8, 0x1, 0x4, 0xfffffffffffffffd, 0x5, 0x5, 0x6a, 0x2, 0xd, 0x8, 0x0, 0xff, 0x2, 0x6, 0x2, 0xffffffff, 0x100000000, 0x4, 0x2, 0x2, 0x40, 0x1000, 0x101, 0xdd16, 0x5b09, 0x7fffffff, 0x100, 0xfffffffffffffe00, 0x400, 0x2c, 0x200, 0x0, 0x7, 0x6, @perf_config_ext={0x7, 0x2}, 0x5eeddb8347f23dc6, 0x6, 0xa, 0x0, 0xfffffffffffff5fe, 0xd24, 0x9}, r5, 0x9, r6, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x2, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x10) 03:35:30 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:30 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r2, 0x601, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44081) 03:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000028421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 606.615152][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000003f421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 606.661864][T16095] binder: BC_ATTEMPT_ACQUIRE not supported [ 606.673786][T16095] binder: 16089:16095 ioctl c0306201 200005c0 returned -22 03:35:30 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000680)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x10}, 0x7}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x400}, r1}}, 0x48) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000580)={0x5, 0x2, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x50000) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xffffffff, 0xffffffffffffffff, 0x6, 0x9, 0x0, 0xca8, 0x1, 0x4, 0xfffffffffffffffd, 0x5, 0x5, 0x6a, 0x2, 0xd, 0x8, 0x0, 0xff, 0x2, 0x6, 0x2, 0xffffffff, 0x100000000, 0x4, 0x2, 0x2, 0x40, 0x1000, 0x101, 0xdd16, 0x5b09, 0x7fffffff, 0x100, 0xfffffffffffffe00, 0x400, 0x2c, 0x200, 0x0, 0x7, 0x6, @perf_config_ext={0x7, 0x2}, 0x5eeddb8347f23dc6, 0x6, 0xa, 0x0, 0xfffffffffffff5fe, 0xd24, 0x9}, r5, 0x9, r6, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x2, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x10) 03:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000048421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:30 executing program 1: clone(0x1, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:30 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000680)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x10}, 0x7}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x400}, r1}}, 0x48) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000580)={0x5, 0x2, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x50000) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xffffffff, 0xffffffffffffffff, 0x6, 0x9, 0x0, 0xca8, 0x1, 0x4, 0xfffffffffffffffd, 0x5, 0x5, 0x6a, 0x2, 0xd, 0x8, 0x0, 0xff, 0x2, 0x6, 0x2, 0xffffffff, 0x100000000, 0x4, 0x2, 0x2, 0x40, 0x1000, 0x101, 0xdd16, 0x5b09, 0x7fffffff, 0x100, 0xfffffffffffffe00, 0x400, 0x2c, 0x200, 0x0, 0x7, 0x6, @perf_config_ext={0x7, 0x2}, 0x5eeddb8347f23dc6, 0x6, 0xa, 0x0, 0xfffffffffffff5fe, 0xd24, 0x9}, r5, 0x9, r6, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x2, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x10) 03:35:30 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(0xffffffffffffffff, 0x800020c0045002, &(0x7f0000000040)) 03:35:30 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x5473, &(0x7f0000000180)) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x8000) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000100)) 03:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000004c421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:30 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400800, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:30 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'bond0\x00', {0x2, 0x4e1e, @broadcast}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\na\b@'], 0x0, 0x0, 0x0}) 03:35:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000680)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x10}, 0x7}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x400}, r1}}, 0x48) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000580)={0x5, 0x2, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x50000) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xffffffff, 0xffffffffffffffff, 0x6, 0x9, 0x0, 0xca8, 0x1, 0x4, 0xfffffffffffffffd, 0x5, 0x5, 0x6a, 0x2, 0xd, 0x8, 0x0, 0xff, 0x2, 0x6, 0x2, 0xffffffff, 0x100000000, 0x4, 0x2, 0x2, 0x40, 0x1000, 0x101, 0xdd16, 0x5b09, 0x7fffffff, 0x100, 0xfffffffffffffe00, 0x400, 0x2c, 0x200, 0x0, 0x7, 0x6, @perf_config_ext={0x7, 0x2}, 0x5eeddb8347f23dc6, 0x6, 0xa, 0x0, 0xfffffffffffff5fe, 0xd24, 0x9}, r5, 0x9, r6, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x2, 0x0) [ 607.229349][T16337] binder: 16336:16337 unknown command 1074290954 03:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000006558421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:30 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) [ 607.268124][T16337] binder: 16336:16337 ioctl c0306201 200005c0 returned -22 03:35:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000680)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x10}, 0x7}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x400}, r1}}, 0x48) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000580)={0x5, 0x2, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x50000) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xffffffff, 0xffffffffffffffff, 0x6, 0x9, 0x0, 0xca8, 0x1, 0x4, 0xfffffffffffffffd, 0x5, 0x5, 0x6a, 0x2, 0xd, 0x8, 0x0, 0xff, 0x2, 0x6, 0x2, 0xffffffff, 0x100000000, 0x4, 0x2, 0x2, 0x40, 0x1000, 0x101, 0xdd16, 0x5b09, 0x7fffffff, 0x100, 0xfffffffffffffe00, 0x400, 0x2c, 0x200, 0x0, 0x7, 0x6, @perf_config_ext={0x7, 0x2}, 0x5eeddb8347f23dc6, 0x6, 0xa, 0x0, 0xfffffffffffff5fe, 0xd24, 0x9}, r5, 0x9, r6, 0x1) 03:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000060421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:31 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000005865421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:31 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(0xffffffffffffffff, 0x800020c0045002, &(0x7f0000000040)) 03:35:31 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x400a00, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{0x0, 0x7530}, {r2, r3/1000+30000}}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r4, &(0x7f00000000c0), 0x8) ioctl$int_in(r4, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r4, 0x800020c0045002, &(0x7f0000000040)) 03:35:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) r1 = accept4$ax25(0xffffffffffffff9c, &(0x7f0000000080)={{0x3, @bcast}, [@default, @bcast, @null, @remote, @default, @netrom]}, &(0x7f0000000140)=0x48, 0x800) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="3f6ff10234e087f6d0fe98af040d6a2a794e9248066a375992c2a0da4757acc11de5c75a59d4e31c1d97ca946c6cb035546be7eb9d8610c7f40bbad9cb891ac7d3518137b9661cdb5b223f1d5e470229693d44a013974f89eba119f6337f7866cd831c06b152987f5ffc1065d5c5a9e60610569fea3a4a573fc3a8172852b4585555b62dde3a60752683a091a85438e822f41138b7d8c7fe0323e9f67639500bb51c518b331550dc4cccac708604f47d8a1c39f6053f7af20b6d34874afd7dc783f643a4174d308fb696e9b61fbaf2bf62b853bdc42d2cee067dfc13619d51ac61a3a1cd47958a07f7846688af1717fd8a2a6c0d6c3dcc", 0xf7}, {&(0x7f0000000280)="fcc78783f0ee8e3724d3cdf64e55fb1fb478ab497cc67cdff181275076eb03b1bd3062f234eb9a4d170c18457c31dd1000cb15dcf4b228210b0004c94a45ef96ad62fb785d067e8ab6bdb8e460b69998df6ef7301d6365114f4f3c56b5fe821a6133cac38f6e734c16c17069a6e84ec3c29093f832837f1b3c8c01c373d250d1190d", 0x82}, {&(0x7f0000000340)="6ef3e1a09b3f05836188bbc1fccf438033ad587f43da506e1e960bff780c07bd7c660427a0288988f4515f5db6e4ad348cdf07b826840e519857ba92fbd1cab2e0cb978ca774dfa3f17ee0d77684eb2cf01b", 0x52}], 0x3) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0xfffffffffffffeb0, 0x0, 0x0}) 03:35:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000680)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x10}, 0x7}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x400}, r1}}, 0x48) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000580)={0x5, 0x2, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x50000) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xffffffff, 0xffffffffffffffff, 0x6, 0x9, 0x0, 0xca8, 0x1, 0x4, 0xfffffffffffffffd, 0x5, 0x5, 0x6a, 0x2, 0xd, 0x8, 0x0, 0xff, 0x2, 0x6, 0x2, 0xffffffff, 0x100000000, 0x4, 0x2, 0x2, 0x40, 0x1000, 0x101, 0xdd16, 0x5b09, 0x7fffffff, 0x100, 0xfffffffffffffe00, 0x400, 0x2c, 0x200, 0x0, 0x7, 0x6, @perf_config_ext={0x7, 0x2}, 0x5eeddb8347f23dc6, 0x6, 0xa, 0x0, 0xfffffffffffff5fe, 0xd24, 0x9}, r5, 0x9, r6, 0x1) 03:35:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000068421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:31 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000006c421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 607.890195][T16588] binder: BC_ATTEMPT_ACQUIRE not supported [ 607.909138][T16588] binder: 16587:16588 ioctl c0306201 200005c0 returned -22 03:35:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000680)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x10}, 0x7}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x400}, r1}}, 0x48) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000580)={0x5, 0x2, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x50000) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xffffffff, 0xffffffffffffffff, 0x6, 0x9, 0x0, 0xca8, 0x1, 0x4, 0xfffffffffffffffd, 0x5, 0x5, 0x6a, 0x2, 0xd, 0x8, 0x0, 0xff, 0x2, 0x6, 0x2, 0xffffffff, 0x100000000, 0x4, 0x2, 0x2, 0x40, 0x1000, 0x101, 0xdd16, 0x5b09, 0x7fffffff, 0x100, 0xfffffffffffffe00, 0x400, 0x2c, 0x200, 0x0, 0x7, 0x6, @perf_config_ext={0x7, 0x2}, 0x5eeddb8347f23dc6, 0x6, 0xa, 0x0, 0xfffffffffffff5fe, 0xd24, 0x9}, r5, 0x9, r6, 0x1) 03:35:31 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000074421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000680)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x10}, 0x7}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x400}, r1}}, 0x48) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000580)={0x5, 0x2, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x50000) 03:35:31 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) r1 = socket(0x9, 0xb, 0x1f) creat(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000001700)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f00000016c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0500000000010000a12f375800000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="0100004001000000040000a005430000e56fa6d9dbcd3d221f67c17bb0b8f1213777e1be37e2b526f700c938438146d2860b62ef5109817f897be9bc14c3ea22f756e46a755a1c1f1468c4cc6757d6d16064e9cec8af292eeca911d550"], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4044) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x2000) [ 608.210053][T16726] binder: BC_ATTEMPT_ACQUIRE not supported [ 608.231042][T16726] binder: 16725:16726 ioctl c0306201 20000080 returned -22 03:35:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000680)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x10}, 0x7}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x400}, r1}}, 0x48) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000580)={0x5, 0x2, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) 03:35:32 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000000000000, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:32 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @remote}}, 0xbb52, 0xff00000000000000, 0x0, 0xfff}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x9, 0x40, 0x3, 0x8, 0x6, 0x80000001, 0x7, 0x34, r1}, &(0x7f0000000240)=0x20) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0x5, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 03:35:32 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f0000000000007a421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:32 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(0xffffffffffffffff, 0x800020c0045002, &(0x7f0000000040)) 03:35:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000680)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x10}, 0x7}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x400}, r1}}, 0x48) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000580)={0x5, 0x2, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:32 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000680)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x10}, 0x7}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x400}, r1}}, 0x48) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000580)={0x5, 0x2, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) [ 608.540378][T16852] binder: BC_ATTEMPT_ACQUIRE not supported [ 608.570503][T16852] binder: 16850:16852 ioctl c0306201 200005c0 returned -22 03:35:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000081421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000ec0421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x400a00, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{0x0, 0x7530}, {r2, r3/1000+30000}}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r4, &(0x7f00000000c0), 0x8) ioctl$int_in(r4, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r4, 0x800020c0045002, &(0x7f0000000040)) 03:35:32 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x7fff, &(0x7f00000001c0)=""/150) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000100)) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000040)) 03:35:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000680)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x10}, 0x7}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x400}, r1}}, 0x48) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000580)={0x5, 0x2, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) 03:35:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000000f0421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x400a00, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{0x0, 0x7530}, {r2, r3/1000+30000}}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r4, &(0x7f00000000c0), 0x8) ioctl$int_in(r4, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r4, 0x800020c0045002, &(0x7f0000000040)) 03:35:32 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x0, &(0x7f0000000040)) 03:35:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f000000000000fb421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000680)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x10}, 0x7}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x400}, r1}}, 0x48) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000580)={0x5, 0x2, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) 03:35:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x400a00, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{0x0, 0x7530}, {r2, r3/1000+30000}}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r4, &(0x7f00000000c0), 0x8) ioctl$int_in(r4, 0x800000c0045009, &(0x7f0000000180)) ioctl$int_in(r4, 0x800020c0045002, &(0x7f0000000040)) [ 609.380453][ T74] [ 609.382825][ T74] ===================================== [ 609.388361][ T74] WARNING: bad unlock balance detected! [ 609.393901][ T74] 5.1.0-rc1-next-20190322 #9 Not tainted [ 609.399526][ T74] ------------------------------------- [ 609.405065][ T74] kworker/u4:3/74 is trying to release lock (&file->mut) at: [ 609.409041][ T3876] kobject: 'loop0' (00000000f22a09a0): kobject_uevent_env [ 609.412553][ T74] [] ucma_event_handler+0x711/0xef0 [ 609.426301][ T74] but there are no more locks to release! [ 609.427896][ T3876] kobject: 'loop0' (00000000f22a09a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 609.432015][ T74] [ 609.432015][ T74] other info that might help us debug this: [ 609.432024][ T74] 4 locks held by kworker/u4:3/74: [ 609.432027][ T74] #0: 0000000002c92b27 ((wq_completion)ib_addr){+.+.}, at: process_one_work+0x87e/0x1790 [ 609.432148][ T74] #1: 00000000f1e8af48 ((work_completion)(&(&req->work)->work)){+.+.}, at: process_one_work+0x8b4/0x1790 [ 609.476589][ T74] #2: 000000007f8cbb70 (&id_priv->handler_mutex){+.+.}, at: addr_handler+0xaf/0x3d0 [ 609.486154][ T74] #3: 0000000060a89414 (&file->mut){+.+.}, at: ucma_event_handler+0xb3/0xef0 [ 609.495053][ T74] [ 609.495053][ T74] stack backtrace: [ 609.498930][ T3876] kobject: 'loop1' (000000006700800a): kobject_uevent_env [ 609.500975][ T74] CPU: 0 PID: 74 Comm: kworker/u4:3 Not tainted 5.1.0-rc1-next-20190322 #9 [ 609.500982][ T74] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:35:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000002421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000680)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x10}, 0x7}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x400}, r1}}, 0x48) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000580)={0x5, 0x2, 0x8}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x50000) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xffffffff, 0xffffffffffffffff, 0x6, 0x9, 0x0, 0xca8, 0x1, 0x4, 0xfffffffffffffffd, 0x5, 0x5, 0x6a, 0x2, 0xd, 0x8, 0x0, 0xff, 0x2, 0x6, 0x2, 0xffffffff, 0x100000000, 0x4, 0x2, 0x2, 0x40, 0x1000, 0x101, 0xdd16, 0x5b09, 0x7fffffff, 0x100, 0xfffffffffffffe00, 0x400, 0x2c, 0x200, 0x0, 0x7, 0x6, @perf_config_ext={0x7, 0x2}, 0x5eeddb8347f23dc6, 0x6, 0xa, 0x0, 0xfffffffffffff5fe, 0xd24, 0x9}, r5, 0x9, r6, 0x1) [ 609.501053][ T74] Workqueue: ib_addr process_one_req [ 609.529001][ T3876] kobject: 'loop1' (000000006700800a): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 609.532109][ T74] Call Trace: [ 609.532131][ T74] dump_stack+0x172/0x1f0 [ 609.532148][ T74] ? ucma_event_handler+0x711/0xef0 [ 609.532164][ T74] print_unlock_imbalance_bug.cold+0x114/0x123 [ 609.532184][ T74] ? ucma_event_handler+0x711/0xef0 [ 609.567517][ T74] lock_release+0x67e/0xa00 [ 609.572100][ T74] ? lock_downgrade+0x880/0x880 [ 609.577095][ T74] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 609.583296][ T74] __mutex_unlock_slowpath+0x8e/0x6b0 [ 609.589339][ T74] ? wait_for_completion+0x440/0x440 [ 609.594714][ T74] ? lockdep_hardirqs_on+0x418/0x5d0 [ 609.601965][ T74] mutex_unlock+0xd/0x10 [ 609.610651][ T74] ucma_event_handler+0x711/0xef0 [ 609.616602][ T74] addr_handler+0x2ee/0x3d0 [ 609.621865][ T74] ? cma_work_handler+0x1f0/0x1f0 [ 609.627471][ T74] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 609.633741][ T74] ? rdma_translate_ip+0x300/0x300 [ 609.639569][ T74] ? mark_held_locks+0xf0/0xf0 [ 609.645393][ T74] ? process_one_work+0x890/0x1790 [ 609.650983][ T74] process_one_req+0x109/0x680 [ 609.656997][ T74] process_one_work+0x98e/0x1790 [ 609.661986][ T74] ? pwq_dec_nr_in_flight+0x320/0x320 [ 609.667995][ T74] ? lock_acquire+0x16f/0x3f0 [ 609.670940][ T3876] kobject: 'loop1' (000000006700800a): kobject_uevent_env [ 609.672727][ T74] worker_thread+0x98/0xe40 [ 609.672747][ T74] kthread+0x357/0x430 [ 609.672760][ T74] ? process_one_work+0x1790/0x1790 [ 609.672781][ T74] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 609.682207][ T3876] kobject: 'loop1' (000000006700800a): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 609.686379][ T74] ret_from_fork+0x3a/0x50 [ 609.738574][ T3876] kobject: 'loop5' (000000000128abcd): kobject_uevent_env [ 609.745848][ T3876] kobject: 'loop5' (000000000128abcd): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 609.756918][ T3876] kobject: 'loop4' (0000000031516e55): kobject_uevent_env [ 609.764092][ T3876] kobject: 'loop4' (0000000031516e55): fill_kobj_path: path = '/devices/virtual/block/loop4' 03:35:33 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/97, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/181, 0x0}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)={0x0, 0x4, 0x2, [0x3, 0x401]}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000004c0)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}}, 0x6, 0x7fffffff, 0x101, 0x81, 0x20}, &(0x7f0000000580)=0x98) pselect6(0x40, &(0x7f00000005c0)={0x1ff, 0x1, 0x1, 0x80000001, 0x9, 0x8, 0x3, 0x1565}, &(0x7f0000000600)={0x5, 0x0, 0x2, 0x800, 0x6, 0x7fffffff, 0x4930, 0x7f}, &(0x7f0000000640)={0x3ff, 0x20, 0xc31, 0x800, 0x0, 0x7, 0x1ff, 0x7}, &(0x7f0000000680), &(0x7f0000000700)={&(0x7f00000006c0)={0xfff000000000000}, 0x8}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000240)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0}) sysfs$2(0x2, 0xffffffffffff9a3a, &(0x7f00000001c0)=""/209) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000800)={r3, 0x8}, 0x8) r4 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x9, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000740)={0x5, 0xffffffffffffff08, 0x0, 0x1, 0x3, 0x400}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f00000007c0)={0x70000000000000, 0x0, 0x3017, 0x2b, 0x5, {0x7}}) ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) getsockname$unix(r0, &(0x7f0000000100), &(0x7f0000000000)=0x6e) 03:35:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000003421ba3a20400ff7e280000001100ffffba16a0aa1c090000000000001200c00e000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:33 executing program 1: socket$pptp(0x18, 0x1, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:33 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) 03:35:33 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x3f00) ioctl$int_in(r0, 0x0, &(0x7f0000000040)) 03:35:33 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) [ 609.838764][ T3876] kobject: 'loop2' (000000005ff30c11): kobject_uevent_env [ 609.865825][ T3876] kobject: 'loop2' (000000005ff30c11): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 609.880747][T17445] __nla_parse: 16 callbacks suppressed 03:35:33 executing program 1: socket$pptp(0x18, 0x1, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 03:35:33 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x6c56, 0x600000000}) [ 609.880756][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 609.892421][ T3876] kobject: 'loop5' (000000000128abcd): kobject_uevent_env [ 609.919324][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 609.922634][ T3876] kobject: 'loop5' (000000000128abcd): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 609.950276][ T3876] kobject: 'loop1' (000000006700800a): kobject_uevent_env [ 609.961637][ T3876] kobject: 'loop1' (000000006700800a): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 609.986280][ T3876] kobject: 'loop0' (00000000f22a09a0): kobject_uevent_env [ 609.998431][ T3876] kobject: 'loop0' (00000000f22a09a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 610.010812][ T3876] kobject: 'loop5' (000000000128abcd): kobject_uevent_env [ 610.020304][ T3876] kobject: 'loop5' (000000000128abcd): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 610.041826][ T3876] kobject: 'loop1' (000000006700800a): kobject_uevent_env [ 610.049127][ T3876] kobject: 'loop1' (000000006700800a): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 610.383891][ T3876] kobject: 'loop4' (0000000031516e55): kobject_uevent_env [ 610.392356][ T3876] kobject: 'loop4' (0000000031516e55): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 610.487231][ T3876] kobject: 'loop2' (000000005ff30c11): kobject_uevent_env [ 610.494564][ T3876] kobject: 'loop2' (000000005ff30c11): fill_kobj_path: path = '/devices/virtual/block/loop2'